Mediator-free secure policy interoperation of exclusively-trusted multiple domains

Authors:
Xingang Wang;Dengguo Feng;Zhen Xu;Honggang Hu
Affiliations:
State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, China;State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, China;State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, China;State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, China
Venue:
ISPEC'08 Proceedings of the 4th international conference on Information security practice and experience
Year:
2008

Citing 22
Cited 2

Graph algorithms and NP-completeness

Graph algorithms and NP-completeness
Security without identification: transaction systems to make big brother obsolete

Communications of the ACM
Introduction to algorithms

Introduction to algorithms
Role-Based Access Control Models

Computer
Computational Issues in Secure Interoperation

IEEE Transactions on Software Engineering
The role graph model and conflict of interest

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
Access control in federated systems

NSPW '96 Proceedings of the 1996 workshop on New security paradigms
A New Search Algorithm for Finding the Simple Cycles of a Finite Directed Graph

Journal of the ACM (JACM)
Providing Security and Interoperation of HeterogeneousSystems

Distributed and Parallel Databases - Security of data and transaction processing
Merging heterogenous security orderings

Journal of Computer Security
Authorization specification and enforcement in federated database systems

Journal of Computer Security
Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation

ACM Transactions on Information and System Security (TISSEC)
Design of a Role-Based Trust-Management Framework

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Role-Based Access Control

Role-Based Access Control
Relying Party Credentials Framework

Electronic Commerce Research
Towards a credential-based implementation of compound access control policies

Proceedings of the ninth ACM symposium on Access control models and technologies
SERAT: SEcure role mApping technique for decentralized secure interoperability

Proceedings of the tenth ACM symposium on Access control models and technologies
An RBAC Framework for Time Constrained Secure Interoperation in Multi-domain Environments

WORDS '05 Proceedings of the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems
Secure Interoperation in a Multidomain Environment Employing RBAC Policies

IEEE Transactions on Knowledge and Data Engineering
Secure collaboration in mediator-free environments

Proceedings of the 12th ACM conference on Computer and communications security
Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy

Proceedings of the eleventh ACM symposium on Access control models and technologies
Semantic access control for information interoperation

Proceedings of the eleventh ACM symposium on Access control models and technologies

Handling inheritance violation for secure interoperation of heterogeneous systems

International Journal of Security and Networks
Secure interoperation design in multi-domains environments based on colored Petri nets

Information Sciences: an International Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

The current schemes for security policy interoperation in multidomain environments are based on a centralized mediator, where the mediator may be a bottleneck for maintaining the policies and mediating cross-domain resource access control. In this paper, we present a mediator-free scheme for secure policy interoperation. In our scheme, policy interoperation is performed by the individual domains, for which, a distributed multi-domain policy model is proposed, and distributed algorithms are given to create such cross-domain policies. Specially, the policies are distributed to each domain, and we ensure that the policies are consistent and each domain keeps the complete policies it shall know.