Research on Access Control Based on Certainty Factor

In current access control mechanisms, the system will assign access privileges to authenticated users without taking into account of the trustworthiness of the user, and the fact that authentication and access control are implemented in different modules provides a possibility for the illegal access. In this paper we first introduce the measure of user´s trust, Certainty Factor (CF), and its computing method, then present a trust model for access control, CF-based Access Control Model, which integrates authentication into access control by means of the Certainty Factor. Our model can determine the access policy dynamically for a user according to his CF, and efficiently prevents the accident that a low-trust user accesses the system with high privileges..