Enhancing Security and Flexibility with Combined RBAC and ABAC Access Control Models

Organizations have started using the feature known as remote data access in recent years. Although it has benefits for the organization's economic development, it also creates several security risks to the protection of its resources. A "Hybrid Access Control Model" is being proposed to address the issues related to access control on an organization's resources. It has integrated both the properties of Attribute Based Access Control (ABAC) And Role Based Access Control (RBAC). RBAC dictates organization roles and their access permissions whereas ABAC dictates attributes of the user who is requesting access. According to user roles, it can be determined what tasks they are responsible for inside the company, and according to user factors like time and location, it can be determined if they are accessing from home or the office. It uses Two-factor authentication to create an additional layer of security to verify the identity and attributes of users before granting access.