terms of frequency, spread and regularity. An example policy would be "The requestor has made k separate visitations, all within last week, and no two consecutive visitations are apart by more than T hours." Identity-Based Access Control (IBAC)Using this network administrators can more effectively manage activity and access based on individual needs. Lattice-Based Access Control (LBAC)A lattice is used to define the levels of security that an object may have and that a subject may have access to. The subject is only allowed to access an object if the security level of the subject is greater than or equal to that of the object. Mandatory Access Control (MAC)In MAC, users do not have much freedom to determine who has access to their files. For example, security clearance of users and classification of data (as confidential, secret or top secret) are used as security labels to define the level of trust. Organization-Based Access Control (OrBAC) OrBAC model allows the policy designer to define a security policy independently of the implementation Role-Based Access Control (RBAC)RBAC allows access based on the job title. RBAC largely eliminates discretion when providing access to objects. For example, a human resources specialist should not have permissions to create network accounts; this should be a role reserved for network administrators. Rule-Based Access Control (RAC)RAC method, also referred to as Rule-Based Role-Based Access Control (RB-RBAC), is largely context based. Example of this would be allowing students to use labs only during a certain time of day; it is the combination of students' RBAC-based information system access control with the time-based lab access rules. Responsibility Based Access Control Information is accessed based on the responsibilities assigned to an actor or a business role Telecommunication In telecommunication, the term access control is defined in U.S. Federal Standard 1037C with the following meanings: A service feature or technique used to permit or deny use of the components of a communication system. A technique used to define or restrict the rights of individuals or application programs to obtain data from, or place data onto, a storage device. The definition or restriction of the rights of individuals or application programs to obtain data from, or place data into, a storage device. The process of limiting access to the resources of an AIS (Automated Information System) to authorized users, programs, processes, or other systems. That function performed by the resource controller that allocates system resources