A new access control model with authority tracking function in E-commerce

With the prevalence of E-commerce, the information security problems are standing out. One critical requirement of security is the accountability and it is worth researching on how to record the information to find out illegal actions. This paper applies the mathematic methodology of graph theory and finite state machine theory to give a new access control model which is able to track the authorizing history based on the “Active Defense Information Security Insurance Technique Frame”. Authority Propagating Tree (APT) is proposed and the security model based on APT is developed. The formal definition, theorem systems and operation rules of the model are illustrated in the paper.