Delegated Attribute-Based Access Control (DABAC) for Contextual Linked Data

Abstract

Security is an inevitable part of every information system. It is a cross-cutting concern that affects every part of the system. There is a constant trade-off between a secured system and convenient security management, and this management gets more demanding when the permissions are context dependent. The delegation of authorization is one way to make this process more convenient, by including and allowing multiple individuals to contribute. We provide a solution for combining multiple security rules such that data owners can delegate a part of their permissions over their data, and can validate them over all allowed data during the security permissions design process.