Larbac: enforcement of location constraints for location-aware RBAC system in mobile environment

The increased usage of mobile devices and mobile applications make location awareness more important than before. The need of adding a location-aware access control component to the existing Role-Based Access Control is also more urgent than before. There are already several researches in integrating location information into access control model. While those researches proposed good location-aware access control models, there is a lack of implementation to enforce these models. This paper presents a novel approach which incorporates location-aware component in a Role-Based Access Control system. The proposed approach provides an automatic permission change for the user, which reflects the user's real-time location and the corresponding access privilege he/she is supposed to have. This paper describes the design criteria and requirements needed for building such a system. This paper also provides a working prototype based on the proposed approach and give a security analysis of the system.