Abstract
Although the basic function of physical access control can be considered simple, that is, to allow authorized personnel to gain access to buildings and deny unauthorized entry, the problem should not be so drastically simplified. In this work, we present two solutions to this problem that make use of special devices named TICA and smartcards. These proposals follow different approaches to manage permissions and authorizations. On the one hand, we present a centralized and on-line solution that makes use of one central database containing the privileges assigned to every user. On the other hand, we describe a system where the authorization-related information is managed in a distributed way. It is an off-line solution based on a RBAC (Role Based Access Control) model that has been designed using authorization certificates.
Partially supported by TIC2000-0198-P4-04 project (ISAIAS), and by 2I02SIU0005 project (m-PISCIS)
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
A. O. Alan, P. Freier, and P. C. Kocher. The SSL Protocol Version 3.0, 1996. Internet Draft.
T. Aura. On the structure of delegation networks. In Proc. 11th IEEE Computer Security Foundations Workshop, pages 14–26, MA USA, June 1998. IEEE Computer Society Press.
M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The role of trust management in distributed systems security. In Secure Internet Programming: Security Issues for Distributed and Mobile Objects, volume 1603 of LNCS, pages 185–210. Springer, 1999.
J. Callas, L. Donnerhacke, H. Finney, and R. Thayer. OpenPGP Message Format, 1998. Request For Comments (RFC) 2440.
O. Canovas and A. F. Gomez. A Distributed Credential Management System for SPKI-Based Delegation Systems. In Proceedings of 1st Annual PKI Research Workshop, Gaithersburg MD, USA, April 2002.
Intel Corporation. Common Data Security Architecture (CDSA). World Wide Web, http://developer.intel.com/ial/security, 2001.
C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. SPKI certificate theory, September 1999. Request For Comments (RFC) 2693.
J.E. Elien. Certificate discovery using spki/sdsi 2.0 certificates. Master’s thesis, Massachusetts Institue of Technology, May 1998.
Open Card Forum. Open Card Framework. World Wide Web, http://www.opencard.org, 2001.
J. Ferrari, S. Poh, R. Mackinnon, and L. Yatawara. Smart Cards: A Case Study. IBM RedBooks, http://www.redbooks.ibm.com/pubs/pdfs/redbooks/sg245239.pdf, October 1998.
R. Housley, W. Ford, and D. Solo. Internet Public Key Infrastructure, Part I: X.509 Certificate and CRL Profile, January 1999. Request for Comments (RFC) 2459.
M. Myers, R. Ankney, A. Malpani, S. Galperin, and C. Adams. OCSP: Online Certificate Status Protocol, June 1999. Request For Comments (RFC) 2560.
Sun microsystems. Java Card 2.1.1 Application Programming Interface. World Wide Web, http://java.sun.com/products/javacard/javacard21.html, May 2000.
Sun microsystems. Java Card 2.1.1 Runtime Environment (JCRE) Specification. World Wide Web, http://java.sun.com/products/javacard/javacard21.html, May 2000.
Sun microsystems. Java Card 2.1.1 Virtual Machine Specification. World Wide Web, http://java.sun.com/products/javacard/javacard21.html, May 2000.
M. Myers. Revocation: Options and challenges. In Proceedings of Financial Cryptography 98, volume 1465 of LNCS, pages 165–171. Springer-Verlag, 1998.
University of Murcia. KRONOS Project. World Wide Web, http://ants.dif.um.es/kronos, 2001.
R. Rivest and B. Lampson. SDSI: A simple distributed security infrastructure.
R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29(2), February 1996.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2002 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Cánovas, Ó., Gómez, A.F., Martínez, H., Martínez, G. (2002). Different Smartcard-Based Approaches to Physical Access Control. In: Davida, G., Frankel, Y., Rees, O. (eds) Infrastructure Security. InfraSec 2002. Lecture Notes in Computer Science, vol 2437. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-45831-X_15
Download citation
DOI: https://doi.org/10.1007/3-540-45831-X_15
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-44309-4
Online ISBN: 978-3-540-45831-9
eBook Packages: Springer Book Archive