Attribute-Based Authorisation as a  Micro-service with Dynamic Encryption  Selection hero image

Attribute-Based Authorisation as a Micro-service with Dynamic Encryption Selection

Project Details

Completed On: May 2025
Core Technology: Express.js

Project Overview

This project provides an Attribute-Based Access Control (ABAC) authorisation system designed for low end devices with limited resources. Users can securely share files using a token based sharing scheme, where these tokens include access permissions and an access time frame. The system is implemented using a microservice architecture to ensure lightweight, scalable performance on a large number of hardware levels. The system dynamically selects an encryption profile based on the hardware capabilities of the device, in order to provide more secure algorithms when system resources allow it. More efficient profiles are chosen when the hardware of the systems is capable of processing the requirements efficiently. A web application demo is used to provide the system, featuring an interface that enables file navigation, access, and sharing through QR codes or shareable links. This project highlights how dynamic encryption profiles, combined with ABAC permission tokens, can provide secure and efficient access control even on resource limited systems.

Timeline

Started On

September 2024

Completed On

May 2025

Technologies

Express.jsNext.js (15)JWTClerk AuthTypescriptAccess Control SystemsAuthorisationMSAKDFJWECBCAESCCMOAuthZTASAASABACRBAC