Abstract

The UCON model extends traditional access control models through continuity of access decision and mutability of subject and object attributes. Due to these two features, the flow of information in UCON becomes considerably different from traditional access control models. A thorough analysis of this information flow is beneficial in any scenario where UCON is used. In this paper, we analyze information flow in UCON. In particular, we identify the rules for information flow, and determine how these rules can be applied to particular policy types of UCON. We specify information flow in core UCON models using temporal logic of actions and provide an algorithm for the automation of dynamic information flow analysis in UCON.

Key words: UCON, traditional access control models, temporal logic of actions.