An Action-based Access Control Model Implementation for MLS Information Systems

Environmental states retrieving is the major issue in the implementation of action-based access control model. In this paper, the environmental states retrieving mechanism based on ABAC (Action-Based Access Control) was proposed. Then, the architecture of network location detector was presented, and the method to get the logical address based on DHCP and the method to get the physical address based on SNMP and MIB were introduced. By proposing the item, security association request, and its producing procedure, the trusted software and hardware monitoring mechanism was presented. Finally, the method to obtain the temporal states was described.