The Computer Journal Advance Access originally published online on October 14, 2008
The Computer Journal 2009 52(8):861-870; doi:10.1093/comjnl/bxn046
| ||||||||||||||||||||||||||||||||||||||||||||||||
This article appears in the following The Computer Journal issue: Incorporating Systems, communications and services in smart homes and Software engineering for e-business Special Issues [View the issue table of contents]
SH-CRBAC: Integrating Attribute and Status Constraints into the RBAC Model in Smart Home Systems
1 School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, 430074, China
2 Department of Computer Science and Engineering, Kyungnam University, 449 Wolyoung-dong, Masan, Kyungnam, 631-701, Korea
3 Department of Multimedia, Hannam University, 133 Ojeong-dong, Daeduk-gu, Daejeon 306-791, Korea
4 Department of Control Science and Engineering, Huazhong University of Science and Technology, Wuhan, 430074, China
* Corresponding author: jhpark1{at}kyungnam.ac.kr
Received 2 April 2008; revised 18 August 2008
The requirements for access control have been increased significantly in smart home systems. Many factors such as user ID, user location, service usage conditions and so on, regarded as authorization attributes, are important in making authorization decision in smart home systems. We investigate into the dynamic characteristics of the authorization in smart home systems and propose a new access-control model, SH-CRBAC, which aims to combine the advantages of attribute-based authorization mechanism and role-based access-control mechanism, and imposes attribute and status constraints on the RBAC model and enhances the generality and flexibility of authorization significantly in smart home systems. The status consistency of SH-CRBAC is analysed, and we also analyse the characteristics of SH-CRBAC through comparison with other popular existing authorization models in smart home systems.
Key Words: authorization attribute authorization constraint smart home