Protecting personal data with various granularities: a logic-based access control approach

Authors:
Bat-Odon Purevjii;Masayoshi Aritsugi;Sayaka Imai;Yoshinari Kanamori;Cherri M. Pancake
Affiliations:
Department of Computer Science, Faculty of Engineering, Gunma University, Kiryu, Gunma, Japan;Department of Computer Science, Faculty of Engineering, Gunma University, Kiryu, Gunma, Japan;Department of Computer Science, Faculty of Engineering, Gunma University, Kiryu, Gunma, Japan;Department of Computer Science, Faculty of Engineering, Gunma University, Kiryu, Gunma, Japan;School of Electrical Engineering & Computer Science, Oregon State University, Corvallis, OR
Venue:
CIS'05 Proceedings of the 2005 international conference on Computational Intelligence and Security - Volume Part II
Year:
2005

Citing 7
Cited 1

A unified framework for enforcing multiple access control policies

SIGMOD '97 Proceedings of the 1997 ACM SIGMOD international conference on Management of data
An authorization mechanism for a relational database system

ACM Transactions on Database Systems (TODS)
A role-based delegation framework for healthcare information systems

SACMAT '02 Proceedings of the seventh ACM symposium on Access control models and technologies
Extending query rewriting techniques for fine-grained access control

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
Security of shared data in large systems: state of the art and research directions

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
A security policy model for clinical information systems

SP'96 Proceedings of the 1996 IEEE conference on Security and privacy
Supporting multiple access control policies in database systems

SP'96 Proceedings of the 1996 IEEE conference on Security and privacy

An Implementation Design of a Fine-Grained Database Access Control Policy Consistency Checking Mechanism

KES '07 Knowledge-Based Intelligent Information and Engineering Systems and the XVII Italian Workshop on Neural Networks on Proceedings of the 11th International Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present a rule-based approach to fine-grained data-dependent access control for database systems. Authorization rules in this framework are described in a logical language that allows us to specify policies systematically and easily. The language expresses authorization rules based on the values, types, and semantics of data elements common to the relational data model. We demonstrate the applicability of our approach by describing several data-dependent policies using an example drawn from a medical information system.