Skip to content
Free planNo credit card requiredStart writing
AI for Research home
AI for Research home
Dashboard
Sign inGet started

Search 250 million research papers

Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.

About 10,000 papers for “attribute control”

Attribute Transformation for Attribute-Based Access Control

Prosunjit Biswas, Ravi Sandhu, Ram Krishnan · 2017

In this paper, we introduce the concept of transforming attribute-value assignments from one set to another set. We specify two types of transformations---attribute reduction and attribute expansion. We distinguish policy attributes from non-policy attributes in that policy attributes are used in authorization policies whereas the latter are not. Attribute reduction is a process of contracting a large set of assignments of non-policy attributes into a possibly smaller set of policy attribute-value assignments. This process is useful for abstracting attributes that are too specific for particular types of objects or users, designing modular authorization policies, and modeling hierarchical policies. On the other hand, attribute expansion is a process of performing a large set of attribute-value assignments to users or objects from a possibly smaller set of assignments. We define a language for specifying mapping for the transformation process. We also identify and discuss various issues that stem from the transformation process.

Cited by 13

Advanced attribute control charts

Zhang, Xiao Lan · DR-NTU (Nanyang Technological University) · 2009

The aim of this research project is to conduct the basic research in computer-aided Statistical Process Control (SPC), in order to improve the performance of conventional attributes control charts monitoring the fraction nonconforming of the process. The project adopts the following techniques: statistical analysis, simulation and optimization.

Cited by 0

Semantic - Attribute Based Access Control

Bayram, Ugur · Duo Research Archive (University of Oslo) · 2020

Access control is a security measure for restricting access to computer resources, especially in multi-user and data sharing settings. Attribute-based access control is a successor of the role-based access control that has a different approach for providing access control and provides dynamic and context-aware access control. Attribute Based Access Control (ABAC) has reached the maturity of OASIS standards with XACML 3.0 and SAML 2.0 (including profiles specific for healthcare) with existing tools like open-source Balana or PicketBox from RedHat JBoss or proprietary engines like from Axiomatics. Nevertheless, little adoption can be seen in the Health & Home care IT solutions in Europe. If in other industries the role-based access control approach can be enough, for medical data and processes the ABAC, and more granular extensions of it, are desired due to the highly sensitive and private nature of the information being accessed and the collaborative nature of the work. ABAC can handle non-trivial access policies like for collaborative access control, needed in e-Hospitals, where multiple subjects should be involved, with varying attributes and roles. The aim of this thesis is to analyse, identify, and develop the best approach on running ABAC on a residential gateway in a smart home used by elderly people to strengthen the security of the home care. First, we examine the ideal hardware that fulfils the basic needs such as installing a custom software as a firmware, updating/upgrading the firmware and interoperating with other wireless devices in the smart home. We examine in detail the widely-used hardware such as Raspberry PI, Residential Gateways in the market. Then, we try to implement an ABAC mechanism on a gateway device. ABAC has a distributed architecture and is usually implemented on a cloud platform. However, in this thesis we are going to implement it on a fog-node where is located inside the elderly people home (i.e., the smart home) and can be managed and maintained much easier. Finally, we try to enrich the developed framework by adding the semantic technologies. In other words, we try to develop a Semantic Attribute Based Access Control (S-ABAC) mechanism, which makes a decision semantically and considers the semantic relationships for inferring new policies (i.e., implicit policies), for IoT environments.

Cited by 0Open access

Attribute-Based Oblivious Access Control

Jinguang Han, Willy Susilo, Yi Mu et al. · The Computer Journal · 2012

In an attribute-based system (ABS), users are identified by various attributes, instead of their identities. Since its seminal introduction, the attribute-based mechanism has attracted a lot of attention. However, current ABS schemes have a number of drawbacks: (i) the communication cost is linear in the number of the required attributes; (ii) the computation cost is linear in the number of the required attributes and (iii) there are no efficient verification algorithms for the secret keys. These drawbacks limit the use of ABS in practice. In this paper, we propose an attribute-based oblivious access control (ABOAC) scheme to address these problems, where only the receiver whose attributes satisfy the access policies can obtain services obliviously. As a result, the receiver does not release anything about the contents of the selected services and his attributes to the sender, and even the number and supersets of his attributes are protected. The sender only knows the number of the services selected by the authorized receiver. Notably, the costs of computation and communication are constant and independent of the number of required attributes. While, in the prior comparable schemes, both the costs of computation and communication are linear in the required attributes. Therefore, our ABOAC scheme provides a novel and elegant solution to protect user's privacy in the systems where both the bandwidth and the computing capability are limited, such as wireless sensor and actor networks, mobile ad hoc networks, etc..

Cited by 20

Attribute-Based Access Control Encryption

Xiuhua Wang, Mengyang Yu, Yaohui Wang et al. · IEEE Transactions on Dependable and Secure Computing · 2024

The burgeoning complexity of communication necessitates a high demand for security. Access control encryption is a promising primitive to meet the security demand but the bulk of its constructions rely on formulating the access control policy with identities. Attribute-based access control policy in attribute-based encryption (ABE) is known to be more expressive without relying on enumerating identities. We propose a generic framework to build attribute-based access control encryption from ciphertext-policy ABE. Our instantiations prioritize different emphases on expressiveness and efficiency. The first instantiation supports multi-valued AND-gate access control structures, while the second supports the linear-secret-sharing access structure. Both are prototyped with efficiency validated empirically.

Cited by 10

Trust access control attribute tree.

Yonggang Huang (223155), Teng Teng (3129972), Yuanyuan Li (18671) et al. · Figshare · 2025

<div> The current approach to data access control predominantly utilizes blockchain technology. However, when dealing with high-dimensional medical data, the inherent transparency of blockchain conflicts with the necessity of protecting patient privacy. Consequently, this increases the risk of sensitive information exposure. To enhance patient privacy, a fuzzy encryption algorithm is employed. This prevents unauthorized access and decryption of sensitive medical data. Consequently, a high-dimensional medical data attribute encryption access control method based on fuzzy algorithm is proposed. Phase data and frequency data are utilized to assess the stability of medical data attributes. Additionally, the empirical mode decomposition method is applied to eliminate noise from these attributes. Using the key configuration of fuzzy encryption algorithm, high-dimensional medical data attributes with different security levels within the same field undergo encryption and decryption processes. Moreover, the trust degree of access behavior towards these data attributes is calculated to maintain security. After the medical users successfully log in, their access permissions are analyzed to effectively control the encrypted access permissions of high-dimensional medical users. The access request graph is established to effectively control encrypted access to high-dimensional medical data attributes. The experimental results showed that when the number of data attributes reached millions, the encryption access control time was still less than 60ms. The maximum encryption time was reduced by 21ms, and the anti-attack success rate was high during the application process. From the comparison of the maximum success rates, it can be seen that the success rate of this method in resisting attacks has increased by 8.5%. </div>

Cited by 0Open access

np-Charts for attribute control

Leiva, Victor, Oliveira, Amilcar · Open Repository - Open University (Universidade Aberta) · 2015

In this article, we introduce charts for attribute control considering the number of defective items, named np‐charts. These charts are preferable over charts for proportion (p) of defective items, named p‐charts, when the sample size (n) remains constant for all subgroups. The benefits of using np‐charts over p‐charts are: an easier interpretation and the fact that no calculation is required for each sample result. We provide a review of the basic issues related to np‐charts and some recent ideas on the topic based on life distributions. In addition, we discuss an implementation of np‐charts in the R software by using examples with data on attributes and lifetimes.

Cited by 0

Attribute-based access control system

Strava, Bronislav · Brno University of Technology Digital Library (Brno University of Technology) · 2021

Tato práce se zaměřuje na implementaci webového rozhraní entity ověřovatele pro systém řízení přístupu založeného na RKVAC protokolu.

Cited by 0

Using Attribute-Based Access Control to Enable Attribute-Based Messaging

Rakesh B. Bobba, Omid Fatemieh, Fariba Khan et al. · Annual Computer Security Applications Conference/Proceedings of the annual Computer Security Applications Conference · 2006

Attribute based messaging (ABM) enables message senders to dynamically create a list of recipients based on their attributes as inferred from an enterprise database. Such targeted messaging can reduce unnecessary communications and enhance privacy, but faces challenges in access control. In this paper, we explore an approach to ABM based on deriving access control information from the same attribute database exploited by the addressing scheme. We show how to address three key challenges. First, we demonstrate a manageable access control system based on attributes. Second we show how this can be used with existing messaging systems to provide a practical deployment strategy. Third, we show that such a system can be efficient enough to support ABM for mid-size enterprises. Our implementation can dispatch ABM messages approved by XACML review for an enterprise of at least 60,000 users with only seconds of latency

Cited by 58

Immediate Attribute Revocation in Decentralized Attribute-Based Encryption Access Control

Youcef Imine, Ahmed Lounis, Abdelmadjid Bouabdallah · 2017

Access control is one of the most challenging issues in Cloud environment, it must ensure data confidentiality through enforced and flexible access policies. The revocation is an important task of the access control process, generally it consists on banishing some roles from the users. Attribute-based encryption is a promising cryptographic method which provides the fine-grained access, which makes it very useful in case of group sharing applications. This solution has initially been developed on a central authority model. Later, it has been extended to a multi-authority model which is more convenient and more reliable. However, the revocation problem is still the major challenge of this approach. There have been few proposed revocation solutions for the Multi-authority scheme and these solutions suffer from the lack of efficiency. In this paper, we propose an access control mechanism on a multi-authority architecture with an immediate and efficient attributes' or users' revocation. The proposed scheme uses decentralized CP-ABE to provide flexible and fine-grained access. Our solution provides collusion resistance, prevents security degradations, supports scalability and does not require keys' redistribution.

Cited by 7

Attribute control charts for effective statistical process control

Haridy Gad Haridy Salah · 2014

The control chart is fast becoming a necessity rather than a fashion in different manufacturing processes and service sectors. No tool can capture the voice of a process better than the control chart. It is an effective tool to monitor a process, reduce variation, improve productivity and ensure quality. The applications of the control chart have now moved into engineering, service management, biology, health care and finance.

Cited by 0Open access

Attribute control charts for effective statistical process control

Salah Haridy Gad Haridy · UPT. Syiah Kuala University Library (Syiah Kuala University) · 2014

The control chart is fast becoming a necessity rather than a fashion in different\n\n\n\n\n\n\n\nmanufacturing processes and service sectors. No tool can capture the voice of a process better\n\n\n\n\n\n\n\nthan the control chart. It is an effective tool to monitor a process, reduce variation, improve\n\n\n\n\n\n\n\nproductivity and ensure quality. The applications of the control chart have now moved into\n\n\n\n\n\n\n\nengineering, service management, biology, health care and finance.\n\n\n\n\n\n\n\nThe control chart is considered as one of the most powerful monitoring techniques in\n\n\n\n\n\n\n\nStatistical Process Control (SPC). It is basically used to achieve the statistical control of a\n\n\n\n\n\n\n\nprocess and its output. SPC provides the decision maker with the ability to monitor the quality\n\n\n\n\n\n\n\ncharacteristics of the product, evaluate the process performance and take a quick corrective\n\n\n\n\n\n\n\naction when out-of-control statuses and abnormal conditions are going to occur in order to avoid\n\n\n\n\n\n\n\ndamages and serious economic losses.\n\n\n\n\n\n\n\nAttribute control charts play a vital role in monitoring the quality characteristics which\n\n\n\n\n\n\n\ncannot be conveniently measured in a continuous numerical scale. Nowadays, attribute charts\n\n\n\n\n\n\n\nenjoy a wide range of applications in many fields such as manufacturing processes, healthcare\n\n\n\n\n\n\n\nsystems and service industries.\n\n\n\n\n\n\n\nThe main objective of this thesis is to develop new attribute control charts with high\n\n\n\n\n\n\n\ndetection effectiveness. This thesis proposes five new attribute charts, namely, a synthetic &amp; np\n\n\n\n\n\n\n\n(Syn-np) chart, an optimal np &amp; Cumulative Sum (np-CUSUM) chart, a CUSUM chart with\n\n\n\n\n\n\n\ncurtailment (Curt_CUSUM), an optimal Sequential Probability Ratio Test (SPRT) chart for\n\n\n\n\n\n\n\nmonitoring p, and finally a novel attribute chart (AFV chart) for monitoring the mean and\n\n\n\n\n\n\n\nvariance of a variable.\n\n\n\n\n\n\n\nA second goal is to provide an overall effectiveness evaluation and systematic\n\n\n\n\n\n\n\ncomparison among the newly developed charts and different attribute charts in the literature\n\n\n\n\n\n\n\nunder the same false alarm rate for a fair comparison. The results of this evaluation give a clear\n\n\n\n\n\n\n\nconclusion on the overall detection effectiveness of the charts and provide a practical guide to\n\n\n\n\n\n\n\nboth academia and industry. To achieve this goal, several types of commonly used control charts\n\n\n\n\n\n\n\nfor attributes including np chart, synthetic chart, Cumulative Sum (CUSUM) chart, Exponentially Weighted Moving Average (EWMA) chart, and Sequential Probability Ratio Test\n\n\n\n\n\n\n\n(SPRT) chart are studied in this thesis. The results of these evaluation and comparison can be\n\n\n\n\n\n\n\nused as guidelines to facilitate the selection of the attribute control charts for different SPC\n\n\n\n\n\n\n\npractitioners.\n\n\n\n\n\n\n\nIn addition, a general model for the optimal design of the attribute control charts is\n\n\n\n\n\n\n\nproposed. In this model, all the independent and dependent charting parameters are optimized\n\n\n\n\n\n\n\nusing an exhaustive search algorithm in order to achieve the best overall performance. This\n\n\n\n\n\n\n\nsearch algorithm is simple and reliable. The Average Number of Defectives (AND) is adopted as\n\n\n\n\n\n\n\nan objective function to design and compare the charts subject to the same false alarm rate. Since\n\n\n\n\n\n\n\nAND is an overall measure of chart performance, therefore, minimizing AND will ensure that the\n\n\n\n\n\n\n\ncontrol chart has an excellent overall performance across the entire shift range of interest.\n\n\n\n\n\n\n\nThe results of the quantitative comparative study reveal that the new charts developed in\n\n\n\n\n\n\n\nthis thesis have achieved a significant improvement in detection effectiveness. Specifically, the\n\n\n\n\n\n\n\nSyn-np chart stands as the most effective Shewhart-type chart for attributes in current SPC\n\n\n\n\n\n\n\nliterature, the np-CUSUM chart and Curt_CUSUM charts are considered as the fastest CUSUM\n\n\n\n\n\n\n\ncharts for detecting p shifts and the optimal SPRT chart is able to double the overall detection\n\n\n\n\n\n\n\nspeed compared with the basic SPRT chart. Although the design of the Syn-np, np-CUSUM,\n\n\n\n\n\n\n\nCurt_CUSUM and optimal SPRT charts is more complicated and their implementation is slightly\n\n\n\n\n\n\n\nmore difficult than the existing counterpart charts, the application of the new charts developed in\n\n\n\n\n\n\n\nthis research can be justified by the substantial improvement in performance.\n\n\n\n\n\n\n\nFinally, the new AFV chart that employs a simple attribute inspection is found to\n\n\n\n\n\n\n\noutperform the variable X-bar&amp;R and X-bar&amp;S charts from an overall viewpoint, under different\n\n\n\n\n\n\n\ncircumstances. As a limitation, the AFV chart is not able to detect decreasing variance shifts.\n\n\n\n\n\n\n\nMoreover, it is not quite suitable to monitor the processes parameters which change frequently.\n\n\n\n\n\n\n\nThe new charts developed in this thesis may help SPC practitioners elsewhere to make a\n\n\n\n\n\n\n\ncorrect and timely decision in face of critical problems, to substantially reduce damages and\n\n\n\n\n\n\n\nquality cost in the long run, and to pave the way for a new cutting-edge research in attribute\n\n\n\n\n\n\n\nSPC.

Cited by 0

USING ATTRIBUTE-BASED ACCESS CONTROL TO ENABLE ATTRIBUTE-BASED MESSAGING BY

Fariba Mahboobe Khan · 2008

Attribute Based Messaging (ABM) enables message senders to dynamically cre-ate a list of recipients based on their attributes as inferred from an enterprise database. Such targeted messaging can reduce unnecessary communications and enhance privacy, but faces challenges in access control. In this work we explore an approach to ABM based on deriving access control information from the same attribute database exploited by the addressing scheme. We show how to address three key challenges. First, we demonstrate a manageable access control system based on attributes. Second we show how this can be used with existing messaging systems to provide a practical deployment strategy. Third, we show that such a system can be efficient enough to support ABM for mid-size enterprise. Our implementation can dispatch ABM messages approved by XACML review for an enterprise of at least 60,000 users with only seconds of latency. iii To Father and Mother. iv

Cited by 0

HetDAPAC: Leveraging Attribute Heterogeneity in Distributed Attribute-Based Private Access Control

Shreya Meel, Şennur Ulukuş · ArXiv.org · 2025

Verifying user attributes to provide fine-grained access control to databases is fundamental to attribute-based authentication. Either a single (central) authority verifies all the attributes, or multiple independent authorities verify the attributes distributedly. In the central setup, the authority verifies all user attributes, and the user downloads only the authorized record. While this is communication efficient, it reveals all user attributes to the authority. A distributed setup prevents this privacy breach by letting each authority verify and learn only one attribute. Motivated by this, Jafarpisheh~et~al. introduced an information-theoretic formulation, called distributed attribute-based private access control (DAPAC). With $N$ non-colluding authorities (servers), $N$ attributes and $K$ possible values for each attribute, the DAPAC system lets each server learn only the single attribute value that it verifies, and is oblivious to the remaining $N-1$. The user retrieves its designated record, without learning anything about the remaining database records. The goal is to maximize the rate, i.e., the ratio of desired message size to total download size. However, not all attributes are sensitive, and DAPAC's privacy constraints can be too restrictive, negatively affecting the rate. To leverage the heterogeneous privacy requirements of user attributes, we propose heterogeneous (Het)DAPAC, a framework which off-loads verification of $N-D$ of the $N$ attributes to a central server, and retains DAPAC's architecture for the $D$ sensitive attributes. We first present a HetDAPAC scheme, which improves the rate from $\frac{1}{2K}$ to $\frac{1}{K+1}$, while sacrificing the privacy of a few non-sensitive attributes. Unlike DAPAC, our scheme entails a download imbalance across servers; we propose a second scheme achieving a balanced per-server download and a rate of $\frac{D+1}{2KD}$.

Cited by 0Open access