Applying Context-Aware RBAC to RFID Security Management for Application in Retail Business

In recent years, Radio Frequency Identification (RFID) technology has been developing rapidly worldwide due to its convenience and efficiency. However, the security issues cannot be ignored when enterprise adopts RFID technology. It needs to take into consideration of the suitable access control mechanisms for RFID. The traditional Role-based Access Control model (RBAC) is not robust enough to deploy with RFID equipments in enterprise. Because of it cannot fulfill the dynamical requirements of access right authorized based on user relevant context information. Therefore, this work proposes the context-aware mechanism for RFID security management. It combines the relevant context of RFID characteristics with Role-based Access Control model. User permissions can thus be authorized dynamically based on current context and access control rules. Moreover, we show the enhance flexibility and efficiency in retail business security management using the proposed context-aware RBAC mechanism.