Data Is Key: Introducing the Data-Based Access Control Paradigm

Authors:
Wolter Pieters;Qiang Tang
Affiliations:
Faulty of Electrical Engineering, Mathematics and Computer Science, University of Twente, ENSCHEDE, The Netherlands 7500;Faulty of Electrical Engineering, Mathematics and Computer Science, University of Twente, ENSCHEDE, The Netherlands 7500
Venue:
Proceedings of the 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security XXIII
Year:
2009

Citing 8
Cited 0

Protecting secret keys with personal entropy

Future Generation Computer Systems - Special issue on security on the Web
How to share a secret

Communications of the ACM
A Fuzzy Vault Scheme

Designs, Codes and Cryptography
Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data

SIAM Journal on Computing
Digital objects as passwords

HOTSEC'08 Proceedings of the 3rd conference on Hot topics in security
A Computational Introduction to Number Theory and Algebra

A Computational Introduction to Number Theory and Algebra
Platform for enterprise privacy practices: privacy-enabled management of customer data

PET'02 Proceedings of the 2nd international conference on Privacy enhancing technologies
Fuzzy identity-based encryption

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques

Quantified Score

Hi-index	0.00

Visualization

Abstract

According to the Jericho forum, the trend in information security is moving the security perimeter as close to the data as possible. In this context, we suggest the idea of data-based access control, where decryption of data is made possible by knowing enough of the data. Trust is thus based on what someone already knows. A specific problem is defined as follows: given n pieces of data, an agent is able to recover all n items once she knows k of them. The problem is similar to both secure sketches and secret sharing, and we show that both can be used as a basis for constructions. Examples of possible applications are granting access without credentials, recovering forgotten passwords and sharing personal data in social networks.