Managing user relationships in hierarchies for information system security

Authors:
Mark Vroblefski;Andrew Chen;Benjamin Shao;Matthew Swinarski
Affiliations:
Department of Management Information Systems, Eller College of Management, University of Arizona, Tucson, AZ 85721, United States;Accounting and Information Systems, School of Business, University of Kansas, Lawrence, KS 66045, United States;Department of Information Systems, W. P. Carey School of Business, Arizona State University, Tempe, AZ 85287, United States;Department of Management Information Systems, School of Business, Penn State University, Erie, PA 16563, United States
Venue:
Decision Support Systems
Year:
2007

Citing 22
Cited 2

On the design of a key-lock-pair mechanism in information protection systems

BIT
An information protection scheme based upon number theory

The Computer Journal
A Binary Single-Key-Lock System for Access Control

IEEE Transactions on Computers
On the Design of a Single-Key-Lock Mechanism Based on Newton's Interpolating Polynomial

IEEE Transactions on Software Engineering
A new access control method using prime factorisation

The Computer Journal - Special issue on safety and security parallel computation
A new dynamic access control scheme based on subject-object list

Data & Knowledge Engineering
A scheme to determine the relationship between two users in a hierarchy

Computers and Security
Distributed assignment of cryptographic keys for access control in a hierarchy

Computers and Security
A binary access control method using prime factorization

Information Sciences: an International Journal
Hiearchical structure of intranet functions and their relative importance: using the analytic hierarchy process for virtual organizations

Decision Support Systems - Special issue: intranets and intranetworking
Computer security

Computer security
Protection and the control of information sharing in multics

Communications of the ACM
A hardware architecture for implementing protection rings

Communications of the ACM
The structure of the “THE”-multiprogramming system

Communications of the ACM
An object-oriented organizational model to support dynamic role-based access control in electronic commerce

Decision Support Systems - Special issue for business to business electronic commerce, issues and solutions
A novel access control method using Morton number and prime factorization

Information Sciences: an International Journal
Cryptography and data security

Cryptography and data security
Key assignment for enforcing access control policy exceptions in distributed systems

Information Sciences: an International Journal
A Dynamic Mechanism for Determining Relationships in a Partially Ordered User Hierarchy

AINA '04 Proceedings of the 18th International Conference on Advanced Information Networking and Applications - Volume 2
Evaluating information assurance strategies

Decision Support Systems
Protection: principles and practice

AFIPS '72 (Spring) Proceedings of the May 16-18, 1972, spring joint computer conference
Access Control with Single-Key-Lock

IEEE Transactions on Software Engineering

Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness

Decision Support Systems
Design of a lattice-based access control scheme

SMC'09 Proceedings of the 2009 IEEE international conference on Systems, Man and Cybernetics

Quantified Score

Hi-index	0.00

Visualization

Abstract

Hierarchies are an important concept in information protection systems. The uses of hierarchies in the security domain of computer information systems include access hierarchies, levels of abstraction in security kernels, multi-level security, and user hierarchies, among others. Using user hierarchies as an example, this paper proposes a new protection mechanism to achieve the key-to-key (KTK) security policy wherein each user in the hierarchy is assigned a key pair and the relationship between any two users can be revealed through an operation on their corresponding keys. In addition to the security provided by the policy, the new mechanism manifests several advantages over the previous methods in the literature. Among its merits are (1) simple and quick operations performed to determine user relationships, (2) less storage requirements, and (3) a high degree of dynamism that allows easy addition and deletion of user keys without affecting most of the existing keys in the user hierarchy. The relevance of the new KTK scheme to organizations and its implications for potential business applications are also discussed.