Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Access control is an important part of security that restricts the actions that users can perform on resources. Policy models specify how these restrictions are formulated in policies. Over the last decades,  have seen several such models, including role-based access control and more recently, attribute-based access control. Hover, these models do not take into account the relationships beten users, resources and entities and their corresponding properties. This limits the expressiveness of these models. In this work,  present Entity-Based Access Control (EBAC). EBAC introduces entities as a primary concept and takes into account both attributes and relationships to evaluate policies. In addition,  present Auctoritas. Auctoritas is a authorization system that provides a practical policy language and evaluation engine for EBAC.  find that EBAC increases the expressiveness of policies and fits the application domain ll. Moreover, our evaluation shows that entity-based policies described in Auctoritas can be enforced with a low policy evaluation latency.
['Jasper Bogaerts', 'Maarten Decat', 'Bert Lagaisse', 'Wouter Joosen']
I am writing a research paper on a idea Entity-Based Access Control: supporting more expressive access control policies
[{"from": "human", "value": "I am writing a research paper on a idea Entity-Based Access Control: supporting more expressive access control policies"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Access control is an important part of security that restricts the actions that users can perform on resources. Policy models specify how these restrictions are formulated in policies. Over the last decades,  have seen several such models, including role-based access control and more recently, attribute-based access control. Hover, these models do not take into account the relationships beten users, resources and entities and their corresponding properties. This limits the expressiveness of these models. In this work,  present Entity-Based Access Control (EBAC). EBAC introduces entities as a primary concept and takes into account both attributes and relationships to evaluate policies. In addition,  present Auctoritas. Auctoritas is a authorization system that provides a practical policy language and evaluation engine for EBAC.  find that EBAC increases the expressiveness of policies and fits the application domain ll. Moreover, our evaluation shows that entity-based policies described in Auctoritas can be enforced with a low policy evaluation latency."}]