Content-based management of document access control

Autoren Edgar Weippl
Ismail Khalil Ibrahim
Werner Winiwarter
Titel Content-based management of document access control
Buchtitel Proc. 14th Int. Conf. on Applications of Prolog (INAP 2001)
Typ in Konferenzband
Ort Tokyo, Japan
Monat October
Jahr 2001
Seiten 78-86
SCCH ID# 252

Three different security models have been advocated to determine the access rights to documents in a network of computers; DAC, MLS, and RBAC. Each of these models has its strength and weakness. No one can urge that any of these models can offer alone by itself an automated support for either the security or the access rights. In this paper, we propose a content-based management model for the access control to documents in a large enterprise. The model determines the access rights to documents based on their content and automatically classifies the access levels or detects possible incorrect settings. The content-based document access control can be used in advanced business applications to allow developers to provide a high level integration of security models within business applications.