ICAF: A context-aware framework for access control

Context-aware systems acquire and integrate multi-faceted knowledge about their environments in order to make decisions. A number of attempts to build frameworks for context-aware systems have been made, but these have not provided adequate support for context-aware access control. In this paper, we prescnt a framework for context-aware access control and its prototype implementation. The framework includes a context model for classifying and capturing access control-oriented contextual infonnation, a situation model for identifying and defining contextual conditions of concern, and a policy model for specifying context-aware access control policies.