A Contextual Access Control Model

The proposed access control model is based on description logic (DL) augmented with a default (δ) and an exception (ϵ) operators to capture context feature. Our model is inspired from OrBAC model and has an expressivity almost comparable to it, which means assigning authorization to a user according to its role in an organization in a given context. The most important difference of our model is the allow of composed context, the add of new context and the deduction of new authorization depending on context.