Access control models in cryptography

Access control models are used to only allows access to an authentic user or resource. These allows to create protocols as to who can use a particular resource in an organization.

There are various access control models some of which are stated below:

1. Discretionary access control: In discretionary access control the access control rules are create by the resource owner. Is considered less secure due to the possibility of the access protocols by the resource owner

2. Mandatory access control: The access control is defined by a central authority based on predefined security rules. Access is based on classification of various users and resources. Used by military and goverment organization. Is more secure due to strict rules by the central authority

3. Rule based access control: In rule based access control the access is defined based on rules defined by the system administrator. Is is similar to Mandatory access control but is more versatile. Can be used with other models as well

4. Role based access control: The access control is based on roles. Can be used on corporate organizations. Is simple and straightforward. Flexible and simplifes the role as access basis

5. Attribute based access control: The access granted is based on a variety of attributes , such as user attributes , resource attributes, environmental factors. Is very flexible model

6. Context based access control: The access is based on context, such as user type, location ,timezone. Used in mobile and cloud communication

7. Identitity based access control: The access is based on user identity. Can be user alongside DAC or other access control model

8. Time based access control: The access is based on time intervals. Can be used by organizations with strict shift based policies

9. Risk adaptive access control: The access is based of risk factors. Used by banks to decide whether to grant access considering mulitple risk factors