Distributed Privilege Enforcement in PACS

被引:0
|
作者
Sturm, Christoph [1 ]
Hunt, Ela [2 ]
Scholl, Marc H. [3 ]
机构
[1] Univ Zurich, Dept Informat, CH-8006 Zurich, Switzerland
[2] Univ Strathclyde, Comp & Informat Sci, Glasgow G1 1XQ, Lanark, Scotland
[3] Univ Konstanz, Dept Comp & Informat Sci, Constance, Germany
关键词
ACCESS-CONTROL;
D O I
暂无
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
We present a new access control mechanism for P2P networks with distributed enforcement, called P2P Access Control System (PACS). PACS enforces powerful access control models like RBAC with administrative delegation inside a P2P network in a pure P2P manner, which is not possible in any of the currently used P2P access control mechanisms. PACS uses client-side enforcement to support the replication of confidential data. To avoid a single point of failure at the time of privilege enforcement, we use threshold cryptography to distribute the enforcement among the participants. Our analysis of the expected number of messages and the computational effort needed in PACS shows that its increased flexibility comes with an acceptable additional overhead.
引用
收藏
页码:142 / +
页数:3
相关论文
共 50 条
  • [31] DELDROID: An automated approach for determination and enforcement of least-privilege architecture in android
    Hammad, Mahmoud
    Bagheri, Hamid
    Malek, Sam
    [J]. JOURNAL OF SYSTEMS AND SOFTWARE, 2019, 149 : 83 - 100
  • [32] An overview of integrity constraints enforcement for a distributed database
    Ibrahim, H
    [J]. PDPTA'2001: PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON PARALLEL AND DISTRIBUTED PROCESSING TECHNIQUES AND APPLICATIONS, 2001, : 822 - 828
  • [33] Distributed Enforcement of Sticky Policies with Flexible Trust
    Brown, Jordan
    Blough, Douglas M.
    [J]. 2015 IEEE 17TH INTERNATIONAL CONFERENCE ON HIGH PERFORMANCE COMPUTING AND COMMUNICATIONS, 2015 IEEE 7TH INTERNATIONAL SYMPOSIUM ON CYBERSPACE SAFETY AND SECURITY, AND 2015 IEEE 12TH INTERNATIONAL CONFERENCE ON EMBEDDED SOFTWARE AND SYSTEMS (ICESS), 2015, : 1202 - 1209
  • [34] On Liveness Enforcement of Distributed Petri Net Systems
    Clavel, Daniel
    Mahulea, Cristian
    Silva, Manuel
    [J]. IEEE TRANSACTIONS ON AUTOMATIC CONTROL, 2023, 68 (06) : 3776 - 3782
  • [35] A distributed privacy enforcement architecture based on Kerberos
    IHP, Im Technologiepark 25, D-15236 Frankfurt, Oder, Germany
    [J]. WSEAS Trans. Commun., 2006, 2 (231-238):
  • [36] Distributed constraint satisfaction and optimization with privacy enforcement
    Silaghi, MC
    Mitra, D
    [J]. IEEE/WIC/ACM INTERNATIONAL CONFERENCE ON INTELLIGENT AGENT TECHNOLOGY, PROCEEDINGS, 2004, : 531 - 535
  • [37] THE IMPLEMENTATION OF A COMMERCIALLY AVAILABLE PACS THROUGH DISTRIBUTED-PROCESSING
    MANN, C
    [J]. PROCEEDINGS OF THE SOCIETY OF PHOTO-OPTICAL INSTRUMENTATION ENGINEERS, 1984, 515 : 46 - 51
  • [38] Vertical integration of musculoskeletal radiology services by a distributed PACS system
    Towers, JD
    Lionetti, DM
    Betancourt, C
    Martin, C
    Chang, PJ
    [J]. RADIOLOGY, 2001, 221 : 762 - 763
  • [39] Quantitative analysis and enforcement of the principle of least privilege in role-based access control
    Lai, Chunren
    Zhang, Chang N.
    [J]. SECRYPT 2006: PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON SECURITY AND CRYPTOGRAPHY, 2006, : 69 - +
  • [40] Vertical integration of musculoskeletal radiology services by a distributed PACS system
    Towers, JD
    Lionetti, DM
    Betancourt, C
    Martin, C
    Chang, PJ
    [J]. RADIOLOGY, 2001, 221 : 580 - 580