Towards a Dynamic Access Control Model for E-Government Web Services

The need of interoperable e-government services is addressed through the use of web services where sensitive services need to be granted to only authorized subjects from different organizations. In this paper, we propose a Trust and Dynamic Role Based Access Control model (TDRBAC) which deals with the specific requirements of e-government services. It effectively enhances the access control level since it is based on the trust level notion. The trust level evaluation is based on contextual attributes to assign to user role the appropriate view during the active session. The TDRBAC model is sensitive to the internal or external arisen events and it incorporates them in the access decision which makes it suitable for e-government dynamic environment.