The Package Concept for Enforcing Usage Control

• 作者: Changda Wang Conghua Zhou Patricia Ghann
• 来源期刊: 信息安全(英文)
• 学科: 医学
• 关键词: Access CONTROL Usage CONTROL Policies OBLIGATION User or Subject BIOMETRIC FINGER Print Logic BOMB Remote CLIENT
• 年，卷（期）: xxaqyw,（2）
• 页码范围: 67-72
• 页数: 6页
• 分类号: R73

摘要

Access and usage control is a major challenge in information and computer security in a distributed network connected environment. Many models have been proposed such as traditional access control and UCONABC. Though these models have achieved their objectives in some areas, there are some issues both have not dealt with. The issue of what happens to a resource once it has been accessed rightfully. In view of this, this paper comes out with how to control resource usage by a concept known as the package concept. This concept can be implemented both with internet connection and without the internet connection to ensure continual control of resource. It packages the various types of resources with the required policies and obligations that pertain to the use of these different resources. The package concept of ensuring usage control focuses on resource by classifying them into three: Intellectual, sensitive and non-sensitive resources. Also this concept classifies access or right into three as: access to purchase, access to use temporally online and access to modify. The concept also uses biometric mechanism such as fingerprints for authentication to check redistribution of resource and a logic bomb to help ensure the fulfillment of obligations.