Purpose-oriented access control model in object-based systems

In distributed applications, a group of multiple objects are cooperating to achieve some objectives by sending messages through communication networks. An object is modeled as a pair of data structure and operations. In the cooperation among multiple objects, it is important to protect against illegal information flow among the objects. In this paper, we discuss an access control model for an object-based system. We propose a novel purpose-oriented access control model which takes into account the purpose for which subjects access objects by operations of the objects.