AGABAC: Implementing and Evaluating an Attribute-Group Access Control Model for Secure Web-Based Spreadsheet Interfaces in Large-Scale e-Government Systems
Year: 2025
Type: preprint
Abstract: The proliferation of large-scale e-government information systems has introduced complex challenges in securing access to vast and dynamic information resources. A critical trend is the integration of Web-based dynamic data style sheets, such as Web Excel, for flexible data manipulation and reporting. However, implementing granular and efficient access control for these interfaces remains a significant, unaddressed research problem. Traditional and existing attribute-based access control (ABAC) models suffer from administrative overhead due to the explosion of attribute relations (m×n×k) and lack a formal framework for defining permissions on spreadsheet elements (cells, ranges). This paper proposes the Attribute-Group ABAC (AGABAC) model to overcome these limitations. AGABAC introduces a novel attribute-grouping mechanism to minimize policy management costs and a secure authorization proxy framework for decentralized administration. Furthermore, it formalizes access control policies specifically for dynamic spreadsheet operations. We implemented a full prototype and evaluated AGABAC against standard ABAC and RBAC models. Our experimental results demonstrate that AGABAC reduces policy configuration time by over 47% compared to standard ABAC and maintains access decision latency below 15ms under a load of 10,000 concurrent users, proving its efficacy for secure and efficient access control in large-scale environments.
Authors: Jin Hyok Pak, Chol Jin Ma
Institution: Kim Il-sung University
Language: English
Topic: Access Control and Trust
Subfield: Sociology and Political Science
Field: Social Sciences
Domain: Social Sciences
Open Access status: gold
OpenAlex ID: W4414397585
Cites:
Cited by:
Related to: