The Package Concept for Enforcing Usage Control

Abstract

Access and usage control is a major challenge in information and computer security in a distributed network connected environment. Many models have been proposed such as traditional access control and UCONABC. Though these mod els have achieved their objectives in some areas, there are some issues both have not dealt with. The issue of what hap pens to a resource once it has been accessed rightfully. In view of this, this paper comes out with how to control re source usage by a concept known as the package concept. This concept can be implemented both with internet connec tion and without the internet connection to ensure continual control of resource. It packages the various types of re sources with the required policies and obligations that pertain to the use of these different resources. The package con cept of ensuring usage control focuses on resource by classifying them into three: Intellectual, sensitive and non-sensi tive resources. Also this concept classifies access or right into three as: access to purchase, access to use temporally online and access to modify. The concept also uses biometric mechanism such as fingerprints for authentication to check redistribution of resource and a logic bomb to help ensure the fulfillment of obligations.