Spatio-Situation-Based Access Control Model for Dynamic Permission on Mobile Applications

Research Mentor: Steven Demurjian

Graduate Mentor: Xian Shao
Focusing on dynamic permissions of mobile applications a user moves from location to location – a spatio approach that is based on a situation of what a user is doing. To illustrate, suppose a physician is accessing patient medical records from the practice at his/her office. If the physician is moving from his/her office to a hospital in a distinguishable geographic location (far enough away for differentiation via GPS and/or cell tower pinging), then the spatio aspect can be utilized to determine the correct appropriate privileges and allowed/prohibited access. If the office and hospital that are located in buildings across the street from one another (geographically indistinguishable), the physician may be prohibited from access to the office EMR while in the hospital. The work will focus on incorporating GPS and spatio capabilities into Connecticut Concussion Tracker mobile application. The Connecticut Concussion Tracker (CT2) application that has been developed as a joint effort between the Depts of Physiology and Neurobiology, and Computer Science & Engineering at the University of Connecticut, in collaboration with faculty in the Schools of Nursing and Medicine in support of a newly passed law on concussions to be tracked K12 (http://www.cga.ct.gov/2014/act/pa/pdf/2014PA-00066-R00HB-05113-PA.pdf).

Components for Student Participation Research tasks for REU participants will include learning about secure mobile computing from the user side (access control models, delivering custom content to users, and adaptive certification). Project supervisors along with senior graduate students will work closely with the REU students and provide mentorship.