Computer Science – Cryptography and Security
Scientific paper
2010-06-23
Journal of Computing, Vol. 2, No. 6, June 2010, NY, USA, ISSN 2151-9617
Computer Science
Cryptography and Security
IEEE Publication Format, https://sites.google.com/site/journalofcomputing/
Scientific paper
Cross-border access to a variety of data such as market information, strategic information, or customer-related information defines the daily business of many global companies, including financial institutions. These companies are obliged by law to keep a data processing legal for all offered services. They need to fulfill different security objectives specified by the legislation. Therefore, they control access to prevent unauthorized users from using data. Those security objectives, for example confidentiality or secrecy, are often defined in the eXtensible Access Control Markup Language that promotes interoperability between different systems. In this paper, we show the necessity of incorporating the requirements of legislation into access control. Based on the work flow in a banking scenario we describe a variety of available contextual information and their interrelations. Different from other access control systems our main focus is on law-compliant cross-border data access. By including legislation directly into access decisions, this lawfulness can be ensured. We also describe our information model to demonstrate how these policies can be implemented into an existing network and how the components and contextual information interrelate. Finally, we outline an event flow for a request made from a remote user exemplifying how such a system decides about access.
Engel Thomas
Stieghahn Michael
No associations
LandOfFree
Law-Aware Access Control and its Information Model does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with Law-Aware Access Control and its Information Model, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Law-Aware Access Control and its Information Model will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-278123