2004 · 26 citations · 6 references
ComputingGeoinformaticsManagement Information SystemsAccess ManagementData ManagementWeb SecurityAccess ControlAuthorizationPolicy-based Access ControlSpatial Data ModelsSpatial Database SystemsUser ManagementAuthorization MechanismsAuthorization RulesGeographical Scope DefinitionIdentitySpatial Data Access RightsSystem Access ControlWeb Map AuthorizationWeb-based Geographic Information Systems
In this paper, we present an access control model for spatial data on Web. Such a model is based on the following assumptions: first, spatial data consist of objects with sharp boundaries located in a geographical space; second, data are manipulated through the operations provided by a Web map management service. The goal of the system is to control the way data are accessed by users having different profiles. We propose an extension of classical models based on authorization rules by assigning authorizations a geographical scope. In such a way, the operations users may execute on spatial data may vary, depending on user identity and object position.
6