# A Framework for Attribute-Based Access Control in Processing Big Data with Multiple Sensitivities
## 2 Materials and Methods
### Implementation Strategy
#### 2.1.2 AC Attribute Models
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**AC Method (References)** & **Description** & **Security** & **Use Case** \\  & & **Observations** & **Application** \\ \hline Provenance, History Based & The provenance of the data (meta-data) is used as part of the access control decision process. & Supports ensuring execution of privacy preserving programs & Sanitization required to combine and process datasets \\ \hline Resource Based & Permissions are assigned directly to the data. For hierarchically organized data, permissions are inherited by sub-folders from superior folders. Expands upon current file system permissions through centralized management and increased controls on inheritance. & Strengthens previous methods by adding controls on data processing resources & Fine grain dataset control \\ \hline Task—Role Based & Tasks (read, write, execute) are associated with certain roles. Security policies are enforced based on the role a user is assigned and the tasks that role is authorized to perform. Used in healthcare when a patient conducts a medical test and writes data to their medical record. & Strengthens current methods by adding controls to tasks & Fine grain user control \\ \hline Relationship Based [21, 22, 23, 24] & Authorization policies are based upon relationships. Users grant access to information based upon relationships, such as “friends.” & Distributed controls to a broad set of users leads to inconsistencies & Online social networks \\ \hline Role Based, Time Bound [25, 26] & Enables temporary, time limited privileges to be provided to users assigned to roles. Enables a just-in-time access model. For example is users access could be limited to business hours. & Risk of unauthorized access constrained by time & Public wifi Access \\ \hline Object Tagged, Rule Based [27] & Meta-data tags used as part of the access control decision process. & Ensuring integrity of attributes critical to trustworthiness & Dynamic dataset control \\ \hline Semantic and Ontology Role Based [28] & Addresses mismatches in attribute definitions associated with data from different sources by applying semantics and ontologies as the basis for the access control decision & Technically complex, depends upon accurate inference & Integration of dataset controls across different systems \\ \hline Content-Sensitivity Based & The sensitivity score of data is updated based upon provenance changes. Access to the data is permitted/denied based upon users’ access rights to sensitive data scores. & Technically complex, depends upon accurate inference & Needs to infer access rights \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Analysis of ABAC approaches in BDP. 14 January 2023), provides standard attribute definitions [31]. SAML is used to express authentication and authorization assertions between a user claim and the response of the contacted system. SAML defines user attributes so that additional information about the users can be provided as part of the sign-on process, thereby supporting service provisioning decisions. The \"name\" attribute, for example, is expressed in multiple forms in SAML. The XML representation, which has a semantic format, is based upon conventions used in a functional or technical domain or name space, such as X.520, eduPerson ([[http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd02/saml-subject-id-attr-v1.0-csprd02.html#eduPerson](http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd02/saml-subject-id-attr-v1.0-csprd02.html#eduPerson)]([http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd02/saml-subject-id-attr-v1.0-csprd02.html#eduPerson](http://docs.oasis-open.org/security/saml-subject-id-attr/v1.0/csprd02/saml-subject-id-attr-v1.0-csprd02.html#eduPerson)) accessed 14 January 2023), and the National Identity Exchange Federation (NIEF) ([[https://nief.org/attribute-registry/](https://nief.org/attribute-registry/)]([https://nief.org/attribute-registry/](https://nief.org/attribute-registry/)) accessed 14 January 2023).