Lattice-based access control

This is an old revision of this page, as edited by Malkulm~enwiki (talk | contribs) at 18:21, 8 October 2006. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

When dealing with computer and information system security, the use of access controls limit system or user access based on a specified set of criteria.


Lattice-Based Access Control (LBAC) is a complex method for limiting information access based on any combination of objects (such as resources, computers, and applications) and subjects (such as individuals, groups or organizations).

In this type of control, a lattice model is applied. In a lattice model, there are pairs of elements that have the least upper bound of values and greatest lower bound of values. To apply this concept to access control, the pair of elements is the subject and object, and the subject has the greatest lower bound and the least upper bound of access rights to an object.

LBAC is known as a more specific set of access control restrictions and is based on the lesser complex model known as Role-Based Access Control (RBAC).

See also