The medical field has a requirement for ubiquitous computing with secure and reliable access control to permit patient information to be logged as they go about their normal activities or to permit medics to remotely access patient information from various mobile devices. Healthcare involves many different people from multiple organizations - general practitioner, hospital doctor or nurse, social workers who all need different information. Defining the required authorization policies can be very complex, resulting in conflicts, which could result in information leaks with privacy implications or prevent access to information needed. In this paper we propose an approach for detecting conflicts defined in an authorization policy by using free variable tableaux. Our method enables us not only to statically detect a conflicting policy but also to give us information that would be helpful to correct the policy by using abductive inference.
Citation:
Hiroaki Kamoda, Akihiro Hayakawa, Masaki Yamaoka, Shigeyuki Matsuda, Krysia Broda, Morris Sloman, "Policy Conflict Analysis Using Tableaux for On Demanc VPN Framework," wowmom, vol. 3, pp.565-569, First International IEEE WoWMoM Workshop on Trust, Security and Privacy for Ubiquitous Computing, 2005