NDLI: Distributed access control: a privacy-conscious approach

Please wait, while we are loading the content...

An approach to evaluate policy similarity

Enforcing access control over data streams

Privacy-aware role based access control

Towards a VMM-based usage control framework for OS kernel integrity protection

Lightweight consistency enforcement schemes for distributed proofs with hidden subtrees

Multilevel filesystems in solaris trusted extensions

Discretionary access control with the administrative role graph model

The role mining problem: finding a minimal descriptive set of roles

Action-status access control

A posteriori compliance control

Fine-grained access control to web databases

A privacy preserving assertion based policy language for federation systems

Managing the risk of covert information flows in virtual machine systems

Mesh: secure, lightweight grid middleware using existing SSH infrastructure

A formal approach for testing security rules

Inter-domain role mapping and least privilege

Specifications of a high-level conflict-free firewall policy language for multi-domain networks

PolicyMorph: interactive policy transformations for a logical attribute-based access control framework

Distributed access control: a privacy-conscious approach

A logical specification and analysis for SELinux MLS policy

New constructions for provably-secure time-bound hierarchical key assignment schemes

A note on the formalisation of UCON

Towards realizing a formal RBAC model in real systems

Role engineering using graph optimisation

Formalizing XML access control for update operations

Chinese-wall process confinement for practical distributed coalitions

PEI models towards scalable, usable and high-assurance information sharing

Using semantics for automatic enforcement of access control policies among dynamic coalitions

Distributed access control: a privacy-conscious approach

Content Provider	ACM Digital Library
Author	Cautis, Bogdan
Abstract	With more and more information being exchanged or published on the Web or in peer-to-peer, and with the significant growth in numbers of distributed, heterogeneous data sources, issues like access control and data privacy are becoming increasingly complex and difficult to manage. Very often, when dealing with sensitive information in such settings, the specification of access control policies and their enforcement are no longer handled by the actual data sources, and are (partially) delegated to third-parties. Besides practical reasons, this is the case when decisions regarding access depend on factors which overpass the scope and knowledge of some of the entities involved. More specifically, policies may depend on private aspects concerning users (accessing data) or data owners. In this case, the only solution is to entrust some third-party authority with all the information needed to apply access policies. However, as the policies themselves depend on sensitive information, this outsourcing raises new privacy issues, that were not present in centralized environments. In particular, information leaks may occur during access control enforcement. In this paper, we consider these issues and, starting from non-conventional digital signatures, we take a first step towards an implementation solution for such settings where both data and access policies are distributed. Our approach involves rewriting user queries into forms which are authorized, and we illustrate this for both structured (relational) and semi-structured (XML) data and queries.
Starting Page	61
Ending Page	70
Page Count	10
File Format	PDF
ISBN	9781595937452
DOI	10.1145/1266840.1266850
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-06-20
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control Privacy Semi-structured data Relational data Xml Digital signatures
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Distributed Access Control: A Privacy-conscious Approach

Distributed Access Control: A Privacy-conscious Approach

Distributed Access Control: A Privacy-conscious Approach

Distributed access control: a privacy-conscious approach.

Supporting Secure Embedded Access Control Policy with XACML+XML Security

An analysis of relational storage strategies for partially structured xml.

1 integrating xml with relational databases using middleware approach.

XML Implementation of Role Based Control in Healthcare Adhoc Networks

Conjoint Data Mining of Structured and Semi-structured Data

Distributed access control: a privacy-conscious approach

Similar Documents

Distributed Access Control: A Privacy-conscious Approach

Distributed Access Control: A Privacy-conscious Approach

Distributed Access Control: A Privacy-conscious Approach

Distributed access control: a privacy-conscious approach.

Supporting Secure Embedded Access Control Policy with XACML+XML Security

An analysis of relational storage strategies for partially structured xml.

1 integrating xml with relational databases using middleware approach.

XML Implementation of Role Based Control in Healthcare Adhoc Networks

Conjoint Data Mining of Structured and Semi-structured Data

Distributed access control: a privacy-conscious approach