Granular Deleting in Multi Level Security Models – An Electronic Engineering Approach

Data protection and information security can be assured by using a multi-level-security (MLS) access control model. However, a workflow between persons with different security levels is complicated by the fact that the exchange of information is only allowed in one direction: from persons that are assigned to a specific security level to person that are assigned to the same security level or to a higher security level (write up). Literature show solution approaches by using a MLS model with increased granularity. This enables distributing parts of documents to subjects of lower security levels without causing a security compromise. However, it does not consider an important aspect of workflows: the deleting of information. Thus, this work uses electronic engineering enlarges the introduced MLS model with increased granularity by integrating a deleting feature. This enables an improved workflow between persons with different security levels.