Policy-Based Behavior Control

Currently, most security models focus on different control objects or restrict conditions, and this method loses generality. One example is RBAC, which only controls access behavior. It is the specialty that restrains model from being used widely. RBAC can only be used in application related to access control. Why do we not take general behavior as control object? Policy-based security technology can manage behavior uniformly. If we can use the general behavior as control object, and combine with policy-based technology, great progress will be got. This paper proposes a Policy-based Behavior Control model (PBBC). PBBC controls system with general behavior. And the property of the behavior is described with variable. Hence the restriction of the behavior is also general and more comprehensive than the exiting models. Furthermore, based on policy, PBBC separates application logic, control logic and security policy from each other, which makes it more flexible and is easy to be realized. In this paper, we provide the description of PBBC and its design method. An application sample of PBBC is also provided.