International Journal of Computer Theory and Engineering

Abstract

Role-based access control is widely used in modern enterprise systems because it is adequate for reflecting the functional hierarchy in various organizations’ for access control model. However, environmental changes, such as the increasing usage of mobile devices, make several challenges. Our research suggests a relationship-based access control model that considers the relation with surrounding users in organization. Relation is significant context information but it is not considered in existing access control models. The proposed technique is different from that in traditional research in two ways. First, we regard the relationship among employee’s as contextual information. As a result, the administrator can manage fine-grained access control for cooperative work in an organization. Second, we design access control architecture using NFC technique to deal with usability and security problems. Moreover, we propose a protocol for enforcing the suggested access control model in real world. We report performance analysis and security evaluation