An Approach to Specifying and Analyzing Context-Aware Access Control Policies

This paper specifies context-aware access control policies by adding constraints to role activation in RBAC models.Formal specification for context-aware access control policy model is created using the logical language Datalog.Properties such as consistency and completeness are specified by first-order logic formulas.A prototype system for access control decision making is built using Datalog mechanisms.