Research on multi-policy supporting access control model

Multi-policy supporting is a security mechanism which can control security system's action based on more than one policy. This mechanism can enhance the security of system greatly. The exiting typical access control models, such as MAC, DAC, RBAC, are not multi-policy supporting. This paper provides a multi-policy supporting access control model (MPSAC). Because of the complexity of applying multiple policies in MPSAC, we not only define the model's session and policy, but also illustrate session's logic relationship, policy conflict, policy decision rules and the implementation method. Different from the exiting access models, a comprehensive description mechanism in MPSAC is proposed to depict the session's property, and a systemic description and management method are proposed for policy. In order to enforce the policy effectively and improve the model's flexibility, a new framework for MPSAC is provided, which separates application logic, security control logic and security policy from each other. The application of MPSAC is provided in a hospital information system.