KTH-SEECS Applied Information Security Lab

National University of Sciences and Technology (NUST)

GARD: Generic Access Rights Delegation Framework for Collaborative Environment

Domain:Access Control, Cloud Computing Security

Status: Completed

Contact Person(s): Amir Ali , Awais Shibli

To provide flexibility in access control models, delegation mechanism is widely used and has become a main focus of the research community. Access control systems are designed to protect the sensitive data from unauthorized users and to ensure disclosure of information only to authorized entities. Sometimes, to ensure the complete access right mediation, we have to delegate access rights to users for decentralization of authority, back up of roles and collaboration of work. Delegation of access rights in collaborative environment where each organization has applied a different access control model makes it much more complex, since they can't manage the delegation of access rights in heterogeneous environment. In this regards, we aim to provide a Generic Access Right Delegation framework that will facilitate collaborative organization to manage delegation of access rights in heterogeneous environment. Proposed framework will support multiple access control models with all comprehensive features of delegation mechanism.