A Dynamic Access Control Policy Based on Hierarchical Description

Access control policy is utilized to ensure that the available resources aren't accessed unintentionally. Traditional access control policy approaches generally describe the core elements as a holistic, which has high coupling, thus it leads to a limited flexibility and lower dynamic of the policy. To solve this issue, we proposed a dynamic access control policy which is based on hierarchical description method. In our approach, we firstly use attributes to describe the subject, operation, and object by predication, and the relationship of these by layered matching rules. Next, we develop an algorithm in order to dynamically calculate the rules and produce the relations between the subject, operation, object and other elements. It can be seen as a timely and efficiently response to the request of the access control policy, thus realizing the dynamic access control. Finally, our experimental results show that our policy is effective.