A State-Adaptive Access Control Model for Web-Based IDRS System

Role based access control reduces the cost of security administration of large-scale systems. However, it mainly abstracts a user from the function aspect, which is not enough for some complex large-scale systems. In web-based IDRS (Infectious Disease Reporting System), access control is based on not only the function attribute, but domain and category attributes of a user. Meanwhile, the domain and category attributes of a user need to adapt to state changes. We present a state-adaptive access control model that uses role, domain and category attributes to enforce access control. Moreover, it supports dynamic adjustment of domain and category attributes of a user based on state transition.