{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T15:40:49Z","timestamp":1791214849213,"version":"4.1.0"},"reference-count":26,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2005,11,1]],"date-time":"2005-11-01T00:00:00Z","timestamp":1130803200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Inf. Syst. Secur."],"published-print":{"date-parts":[[2005,11]]},"abstract":"<jats:p>\n            The recent usage control model (UCON) is a foundation for next-generation access control models with distinguishing properties of decision continuity and attribute mutability. A usage control decision is determined by combining authorizations, obligations, and conditions, presented as\n            <jats:italic>UCON<\/jats:italic>\n            <jats:sub>\n              <jats:italic>ABC<\/jats:italic>\n            <\/jats:sub>\n            core models by Park and Sandhu. Based on these core aspects, we develop a formal model and logical specification of UCON with an extension of Lamport's temporal logic of actions (TLA). The building blocks of this model include: (1) a set of sequences of system states based on the attributes of subjects, objects, and the system, (2) authorization predicates based on subject and object attributes, (3) usage control actions to update attributes and accessing status of a usage process, (4) obligation actions, and (5) condition predicates based on system attributes. A usage control policy is defined as a set of temporal logic formulas that are satisfied as the system state changes. A fixed set of scheme rules is defined to specify general UCON policies with the properties of soundness and completeness. We show the flexibility and expressive capability of this formal model by specifying the core models of UCON and some applications.\n          <\/jats:p>","DOI":"10.1145\/1108906.1108908","type":"journal-article","created":{"date-parts":[[2006,2,6]],"date-time":"2006-02-06T15:07:09Z","timestamp":1139238429000},"page":"351-387","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":195,"title":["Formal model and policy specification of usage control"],"prefix":"10.1145","volume":"8","author":[{"given":"Xinwen","family":"Zhang","sequence":"first","affiliation":[{"name":"George Mason University, Fairfax, VA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Francesco","family":"Parisi-Presicce","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaehong","family":"Park","sequence":"additional","affiliation":[{"name":"Eastern Michigan University, Ypsilanti, MI"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2005,11]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Secure computer systems: Mathematical foundations and model","author":"Bell D. E.","unstructured":"Bell , D. E. and LaPadula , L. J. 1975. Secure computer systems: Mathematical foundations and model . Mitre Corp. Report No.M74-244, Bedford, MA. ]] Bell, D. E. and LaPadula, L. J. 1975. Secure computer systems: Mathematical foundations and model. Mitre Corp. Report No.M74-244, Bedford, MA.]]"},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of ACM Conference on Computer and Communication Security. ACM","author":"Bertino E.","year":"1911","unstructured":"Bertino , E. , Bettini , C. , and Samarati , P . 1994. A temporal authorization model . In Proceedings of ACM Conference on Computer and Communication Security. ACM , New York.]] 10.1145\/ 1911 77.191202 Bertino, E., Bettini, C., and Samarati, P. 1994. A temporal authorization model. In Proceedings of ACM Conference on Computer and Communication Security. ACM, New York.]] 10.1145\/191177.191202"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/69.485637"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/293910.293151"},{"key":"e_1_2_1_5_1","volume-title":"Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies. ACM","author":"Bertino E.","unstructured":"Bertino , E. , Catania , B. , Ferrari , E. , and Perlasca , P . 2001. A logical framework for reasoning about access control models . In Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies. ACM , New York.]] 10.1145\/373256.373261 Bertino, E., Catania, B., Ferrari, E., and Perlasca, P. 2001. A logical framework for reasoning about access control models. In Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies. ACM, New York.]] 10.1145\/373256.373261"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the 3rd Internationl Workshop on Policies for Distributed Systems and Networks.]]","author":"Bettini C.","unstructured":"Bettini , C. , Jajodia , S. , Wang , X. S. , and Wijesekera , D . 2002a. Obligation monitoring in policy management . In Proceedings of the 3rd Internationl Workshop on Policies for Distributed Systems and Networks.]] Bettini, C., Jajodia, S., Wang, X. S., and Wijesekera, D. 2002a. Obligation monitoring in policy management. In Proceedings of the 3rd Internationl Workshop on Policies for Distributed Systems and Networks.]]"},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the 28th VLDB Conference.]]","author":"Bettini C.","unstructured":"Bettini , C. , Jajodia , S. , Wang , X. S. , and Wijesekera , D . 2002b. Provisions and obligations in policy management and security applications . In Proceedings of the 28th VLDB Conference.]] Bettini, C., Jajodia, S., Wang, X. S., and Wijesekera, D. 2002b. Provisions and obligations in policy management and security applications. In Proceedings of the 28th VLDB Conference.]]"},{"key":"e_1_2_1_8_1","volume-title":"Proceedings of the IEEE Symposium on Research in Security and Privacy.]]","author":"Brewer D.","unstructured":"Brewer , D. and Nash , M . 1988. The chinese wall security policy . In Proceedings of the IEEE Symposium on Research in Security and Privacy.]] Brewer, D. and Nash, M. 1988. The chinese wall security policy. In Proceedings of the IEEE Symposium on Research in Security and Privacy.]]"},{"key":"e_1_2_1_9_1","volume-title":"Proceedings of the 2nd Internationl Workshop on Policies for Distributed Systems and Networks.]]","author":"Chomicki J.","unstructured":"Chomicki , J. and Lobo , J . 2001. Monitors for history-based policies . In Proceedings of the 2nd Internationl Workshop on Policies for Distributed Systems and Networks.]] Chomicki, J. and Lobo, J. 2001. Monitors for history-based policies. In Proceedings of the 2nd Internationl Workshop on Policies for Distributed Systems and Networks.]]"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the Workshop on Policies for Distributed Systems and Networks.]]","author":"Damianou N.","unstructured":"Damianou , N. , Dulay , N. , Lupu , E. , and Sloman , M . 2001. The ponder policy specification language . In Proceedings of the Workshop on Policies for Distributed Systems and Networks.]] Damianou, N., Dulay, N., Lupu, E., and Sloman, M. 2001. The ponder policy specification language. In Proceedings of the Workshop on Policies for Distributed Systems and Networks.]]"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the ACM Conference on Computer and Communication Security.]] 10","author":"Gal A.","unstructured":"Gal , A. and Atluri , V . 2000. An authorization model for temporal data . In Proceedings of the ACM Conference on Computer and Communication Security.]] 10 .1145\/352600.352621 Gal, A. and Atluri, V. 2000. An authorization model for temporal data. In Proceedings of the ACM Conference on Computer and Communication Security.]] 10.1145\/352600.352621"},{"key":"e_1_2_1_13_1","volume-title":"Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10","author":"Hansen M.","unstructured":"Hansen , M. and Sharp , R . 2003. Using interval logics for temporal analysis of security protocols . In Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10 .1145\/1035429.1035432 Hansen, M. and Sharp, R. 2003. Using interval logics for temporal analysis of security protocols. In Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10.1145\/1035429.1035432"},{"key":"e_1_2_1_14_1","volume-title":"Proceedings of the IEEE Symposium On Research in Security and Privacy.]]","author":"Jajodia S.","unstructured":"Jajodia , S. , Samarati , P. , and Subrahmanian , V. S . 1997. A logical language for expressing authorizations . In Proceedings of the IEEE Symposium On Research in Security and Privacy.]] Jajodia, S., Samarati, P., and Subrahmanian, V. S. 1997. A logical language for expressing authorizations. In Proceedings of the IEEE Symposium On Research in Security and Privacy.]]"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/383891.383894"},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the 8th ACM Symposium on Access Control Models and Technologies.]] 10","author":"Joshi J.","unstructured":"Joshi , J. , Bertino , E. , Shafiq , B. , and Ghafoor , A . 2003. Constraints: Dependencies and separation of duty constraints in gtrbac . In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies.]] 10 .1145\/775412.775420 Joshi, J., Bertino, E., Shafiq, B., and Ghafoor, A. 2003. Constraints: Dependencies and separation of duty constraints in gtrbac. In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies.]] 10.1145\/775412.775420"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2005.1"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/177492.177726"},{"key":"e_1_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Manna Z. and Pnueli A. 1991. The Temporal Logic of Reactive and Concurrent Systems Specification. Springer-Verlag New York.]]   Manna Z. and Pnueli A. 1991. The Temporal Logic of Reactive and Concurrent Systems Specification. Springer-Verlag New York.]]","DOI":"10.1007\/978-1-4612-0931-7"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/984334.984339"},{"key":"e_1_2_1_21_1","volume-title":"Proceedings of the Proceedings of 18th Annual IFIP WG 11.3 Working Conference on Data and Applications Security.]]","author":"Park J.","unstructured":"Park , J. , Zhang , X. , and Sandhu , R . 2004. Arrtibute mutability in usage control . In Proceedings of the Proceedings of 18th Annual IFIP WG 11.3 Working Conference on Data and Applications Security.]] Park, J., Zhang, X., and Sandhu, R. 2004. Arrtibute mutability in usage control. In Proceedings of the Proceedings of 18th Annual IFIP WG 11.3 Working Conference on Data and Applications Security.]]"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.241422"},{"key":"e_1_2_1_23_1","volume-title":"Proceedings of the Second International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security.]]","author":"Sandhu R.","unstructured":"Sandhu , R. and Park , J . 2003. Usage control: A vision for next generation access control . In Proceedings of the Second International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security.]] Sandhu, R. and Park, J. 2003. Usage control: A vision for next generation access control. In Proceedings of the Second International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security.]]"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.485845"},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10","author":"Siewe F.","unstructured":"Siewe , F. , Cau , A. , and Zedan , H . 2003. Compositional framework for access control policies enforcement . In Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10 .1145\/1035429.1035433 Siewe, F., Cau, A., and Zedan, H. 2003. Compositional framework for access control policies enforcement. In Proceedings of the ACM Workshop on Formal Methods in Security Engineering.]] 10.1145\/1035429.1035433"},{"key":"e_1_2_1_26_1","volume-title":"IEEE Computer Security Foundations Workshop.]]","author":"Simon R. T.","unstructured":"Simon , R. T. and Zurko , M. E . 1997. Separation of duty in role-based environments . In IEEE Computer Security Foundations Workshop.]] Simon, R. T. and Zurko, M. E. 1997. Separation of duty in role-based environments. In IEEE Computer Security Foundations Workshop.]]"}],"container-title":["ACM Transactions on Information and System Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1108906.1108908","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1108906.1108908","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:07:50Z","timestamp":1750262870000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1108906.1108908"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005,11]]},"references-count":26,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2005,11]]}},"alternative-id":["10.1145\/1108906.1108908"],"URL":"https:\/\/doi.org\/10.1145\/1108906.1108908","relation":{},"ISSN":["1094-9224","1557-7406"],"issn-type":[{"value":"1094-9224","type":"print"},{"value":"1557-7406","type":"electronic"}],"subject":[],"published":{"date-parts":[[2005,11]]},"assertion":[{"value":"2005-11-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}