CAACS: Context-Aware Access Control System for Physical Space in Smart Building

The existing entrance management system is difficult to use because it does not sufficiently use the access control model and contextual information. They are typically based on static model which are such as DAC and MAC. These models are known for not enforcing access control, which administrators desire. To mitigate this problem, exceptional policies must be configured in advance, which renders management difficult. Access control requirements depend on the target and context information around the target. We propose a whole access control system that comprises identification, authentication, authorization, and access decision. Based on attribute based access control model, we realize a context-aware access control system for the physical space. We conducted two case studies at a university. The first one shows how our model can be used. The second one switches the policies that are currently valid to enforce the contextaware access control. Consequently, CAACS would improve the usability of access control management and physical security in the building.

I. Introduction

Access control to a physical space is defined as the restriction on who, when, where, and in what situation access is allowed. Indoor space is composed of subspaces such as room, entrance, and corridor, all of which are connected by a door. In smart building, each door has a smart lock restricting user entry In other words, the lock is the point where access control policy is enforced. These policies are typically maintained by an entrance management system based on principle of least privilege. In particular, physical security is critical in the physical safety and property of a space; therefore, it must be properly ensured.