  A fine-grained provenance-based access control policy model is proposed in
this paper, in order to improve the express performance of existing model. This
method employs provenance as conditions to determine whether a piece of data
can be accessed because historical operations performed on data could reveal
clues about its sensitivity and vulnerability. Particularly, our proposed work
provides a four-valued decision set which allows showing status to match a
restriction particularly. This framework consists of target policy, access
control policy, and policy algebras. With the complete definition and algebra
system construction, a practical fine-grained access control policy model is
developed.
