IBAC Mathematics and Mechanics: The Case for 'Integer Based Access Control' of Data Security in the Age of AI and AI Automation
Mark Stocks

TL;DR
This paper introduces Integer-Based Access Control (IBAC), a mathematically grounded method for fast, efficient, and flexible data security filtering suitable for AI, databases, and document authorization, extending traditional models.
Contribution
The paper presents IBAC, a novel security model using integer tokens for rapid, flexible data access control, extending the Bell-LaPadula model with a new process constraint.
Findings
IBAC enables high-speed row-level data filtering.
IBAC supports federated authorization across diverse systems.
The extended Bell-LaPadula model improves security and flexibility.
Abstract
Current methods for data access control, especially regarding AI and AI automation, face unique challenges in ensuring appropriate data access. We introduce Integer-Based Access Control (IBAC), addressing the limitations of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC). IBAC's mathematical foundations enable its application to relational and NoSQL databases, as well as document authorization. We demonstrate IBAC's suitability for filtering relational database row-level information and AI and NLP access based on separation of duty, supporting both "need to know" and "need to share" data restrictions. IBAC uses security tokens, which are integers representing aggregated security attributes. These tokens maintain orthogonality across encoded attributes but are stored as integers for fast real-time vector comparison and efficient dominance testing. This…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsPrivacy-Preserving Technologies in Data
