Mathematical Foundations of Computer Security

Attribute based access control for key-value stores

S. Ovsyannikov, V. Trenkaev

Tomsk State University, Tomsk

Abstract: A way of restricting access to key-value store based on query parameters (key, operation, password) is proposed. The query parameters are used as subjects (objects) attributes to make access control decisions. Thus this type of control can be related to the attribute based access control model. An access control function with arguments of query parameters is defined. The function has the values from $\{Allow, Deny, Pass\}$ and can be changed by store user.

Keywords: attribute based access control, key-value store, NoSQL database.

UDC: 004.65+004.056.52

DOI: 10.17223/2226308X/8/35