<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>Access control is a part of the security of information technologies. Access control regulates the access requests to system resources. The access control logic is formalized in models. Many access control models exist. They vary in their design, components, policies and areas of application. With the developing of information technologies, more complex access control models have been created. This paper is concerned with overview and analysis for a number of access control models. First, an overview of access control models is presented. Second, they are analyzed and compared by a number of parameters: storing the identity of the user, delegation of trust, fine-grained policies, flexibility, object-versioning, scalability, using time in policies, structure, trustworthiness, workflow control, areas of application etc. Some of these parameters describe the access control models, while other parameters are important characteristics and components of these models. The results of the comparative analysis are presented in tables. Prospects of development of new models are specified.</p>
</abstract>

Access control is a part of the security of information technologies. Access control regulates the access requests to system resources. The access control logic is formalized in models. Many access control models exist. They vary in their design, components, policies and areas of application. With the developing of information technologies, more complex access control models have been created. This paper is concerned with overview and analysis for a number of access control models. First, an overview of access control models is presented. Second, they are analyzed and compared by a number of parameters: storing the identity of the user, delegation of trust, fine-grained policies, flexibility, object-versioning, scalability, using time in policies, structure, trustworthiness, workflow control, areas of application etc. Some of these parameters describe the access control models, while other parameters are important characteristics and components of these models. The results of the comparative analysis are presented in tables. Prospects of development of new models are specified.

Access Control Models

Cybernetics and Information Technologies

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

{"article-title":"Access Control Models"}

Access control is a part of the security of information technologies. Access control regulates the access requests to system resources. The access control...

Access Control Models

Published Online: Dec 09, 2021

Page range: 77 - 104

Received: Jan 03, 2021

Accepted: Sep 17, 2021

DOI: https://doi.org/10.2478/cait-2021-0044

Keywords
Access control, authorization, access control model, permission, access control policy

© 2021 Maria Penelova, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Access Control Models

Published Online: Dec 09, 2021

Page range: 77 - 104

Received: Jan 03, 2021

Accepted: Sep 17, 2021

DOI: https://doi.org/10.2478/cait-2021-0044

KeywordsAccess control, authorization, access control model, permission, access control policy

© 2021 Maria Penelova, published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Keywords
Access control, authorization, access control model, permission, access control policy