A stratified first order logic approach for access control

✍ Scribed by Salem Benferhat; Rania El Baida

• Publisher: John Wiley and Sons
• Year: 2004
• Tongue: English
• Weight: 760 KB
• Volume: 19
• Category: Article
• ISSN: 0884-8173
• DOI: 10.1002/int.20026

✦ Synopsis

Modeling information security policies is an important problem in many domains. This is particularly true in the health care sector, where information systems often manage sensitive and critical data. This article proposes to use nonmonotonic reasoning systems to control access to sensitive data in accordance with a security policy. In the first part of the article, we propose an access control model that overcomes several limitations of existing systems. In particular, it allows us to deal with contexts and to represent the two main kinds of privileges: permissions and prohibitions. This model will then be formally encoded using stratified (or prioritized) firstorder knowledge bases. In the second part of the article, we discuss the problem of conflicts due to the joint handling of permissions and prohibitions. We show that approaches proposed for solving conflicts in propositional knowledge bases are not appropriate for handling inconsistent first-order knowledge bases.