Context and Trust Based Adaptive Security for Accessing Services in Ubiquitous Computing Environment

2. Literature Review

A service access based on the user behavior (Yarmand, Sartipi & Down, 2013) provided the concept of analyzing the user characteristics while designing an adaptive security policy. Our earlier work (Jagadamba and Sathish Babu, 2016a; Jagadamba & Sathish Babu, 2013) was able to examine the user request through the contextual information before fulfilling the request. The work was more of role and context based service access but did not consider the verification of the truthfulness of the user’s request. However, the basic service access model lacks provisions for context, trust and privacy issues when operated in the distributed environments. An effort to integrate trust and privacy was done in an extended Attribute-Based Access Control model for critical situations for registered and non-registered users (Sun, Lili, Yong et al., 2014). The model facilities the development of an access policy through the set of access control rules by combining subjects and objects through context and trust parameters. The concept of relating the subject and object to trust is a good idea to design security policies while accessing the services in smart spaces like health care monitoring environment, smart offices, smart campus and so on.