Controlling access in large partially ordered hierarchies using cryptographic keys

Journal of Systems and Software

Volumn 67, Issue 2, 2003, Pages 99-107

  Hwang, Min Shiang ^a   Yang, Wei Pang ^b  

^a CHAOYANG UNIVERSITY OF TECHNOLOGY   (Taiwan)

^b NATIONAL CHIAO TUNG UNIVERSITY   (Taiwan)

Author keywords

Access control; Cryptography; Data security; Hierarchy; Key management

Indexed keywords

COMPUTATIONAL METHODS; COMPUTER NETWORKS; COMPUTER OPERATING SYSTEMS; DATABASE SYSTEMS; PROBLEM SOLVING; SECURITY OF DATA;

ACCESS CONTROL;

CRYPTOGRAPHY;

EID: 0038053203     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0164-1212(02)00091-2     Document Type: Article

References (30)

1. Akl S.G., Taylor P.D. Cryptographic solution to a problem of access control in a hierarchy. ACM Transactions on Computer Systems. 1(3):1983;239-248.
2. Bell, D., LaPadula, L., 1975. Secure computer systems: Unified exposition and multics interpretation. Technical Report ESD-TR-75-306, Hanscom Air Force Base Technical Report, Beford, MA.
3. Chang C.C., Hwang R.J., Wu T.C. Cryptographic key assignment scheme for access control in a hierarchy. Information Systems. 17(3):1992;243-247.
4. Chang C.-C., Hwang M.-S. Parallel computation of the generating keys for RSA cryptosystems. IEE Electronics Letters. 32(15):1996;1365-1366.
5. Changchien, S.W., Hwang, M.-S., in press. A batch verifying and detecting multiple RSA digital signatures. International Journal of Computational and Numerical Analysis and Applications.
6. DeLaurentis J.M. A further weakness in the common modulus protocol for the RSA cryptosystem. Cryptologia. 8(3):1984;253-259.
7. Denning, D.E., 1984. Cryptographic checksums for multilevel database security. In: Proceedings of the 1984 IEEE Symposium on Security and Privacy, Oakland, pp. 52-61.
8. Denning, D.E., Akl, S.G., Morgenstern, M., Neumann, P.G., Schell, R.R., Heckman, M., 1986. Views for multilevel database security. In: Proceedings of the 1986 IEEE Symposium on Security and Privacy, Oakland, pp. 156-172.
9. Diffie W., Hellman M.E. New directions in cryptography. IEEE Transactions on Information Theory IT. 22(6):1976;644-654.
10. Fraim L.J. Scomp: A solution to the multilevel security problem. IEEE Computer. 1983;26-34.
11. Harn L., Lin H.Y. A cryptographic key generation scheme for multilevel data security. Computers and Security. 9(6):1990;539-546.
12. Hwang M.-S. A cryptographic key assignment scheme in a hierarchy for access control. Mathematical and Computer Modelling. 26(2):1997;27-31.
13. Hwang M.-S. Extension of CHW cryptographic key assignment scheme in a hierarchy. IEE Proceedings Computers and Digital Techniques. 146(4):1999;219.
14. Hwang M.-S. An improvement of a dynamic cryptographic key assignment schemes in a tree hierarchy. Computers and Mathematics with Applications. 37(3):1999;19-22.
15. Hwang M.-S. An asymmetric cryptographic scheme for a totally-ordered hierarchy. International Journal of Computer Mathematics. 73:2000;463-468.
16. Hwang M.-S. Cryptanalysis of YCN key assignment scheme in a hierarchy. Information Processing Letters. 73(3):2000;97-101.
17. Hwang M.-S., Chang C.-C., Yang W.-P. Modified Chang-Hwang-Wu access control scheme. IEE Electronics Letters. 29(24):1993;2095-2096.
18. Hwang M.-S., Lin I.-C., Hwang K.-F. Cryptanalysis of the batch verifying multiple RSA digital signatures. Informatica. 11(1):2000;15-19.
19. Liaw H.-T., Lei C.-L. An optimal algorithm to assign cryptographic keys in a tree structure for access control. BIT. 33:1993;46-56.
20. Liaw H.T., Wang S.J., Lei C.L. A dynamic cryptographic key assignment scheme in a tree structure. Computers and Mathematics with Applications. 25(6):1993;109-114.
21. Lu, W.P., Sundareshan, M.K., 1988. A model for multilevel security in computer networks. In: Proceedings of the 1988 INFOCOM, New Orleans, LA, pp. 1095-1104.
22. Lu W.P., Sundareshan M.K. Enhanced protocols for hierarchical encryption key management for secure communication in internet environments. IEEE Transactions on Communications. 40(4):1992;658-660.
23. Mackinnon S.J., Taylor P.D., Meijer H., Akl S.G. An optimal algorithm for assigning cryptographic keys to control access in a hierarchy. IEEE Transactions on Computers. 34(9):1985;797-802.
24. McCullough, D., 1987. Specifications for multi-level security and a hook-up property. In: Proceedings of the 1987 IEEE Symposium on Security and Privacy, pp. 161-166.
25. McHugh, J., Moore, A.P., 1986. A security policy and formal top level specification for a multi-level secure local area network. In: Proceedings of the 1986 IEEE Symposium on Security and Privacy, Oakland, pp. 34-39.
26. Mcilroy M.D., Reeds J.A. Multilevel security in the UNIX tradition. Software - Practice and Experience. 22(8):1992;673-694.
27. Rivest R.L., Shamir A., Adleman L. A method for obtaining digital signatures and public key cryptosystems. Communications of the ACM. 21(2):1978;120-126.
28. Sandhu R.S. Cryptographic implementation of a tree hierarchy for access control. Information Processing Letters. 27:1988;95-98.
29. Schneier B. Applied Cryptography. second ed. 1996;John Wiley & Sons, New York.
30. Yeh, J.H., Chow, R., Newman, R., 1998. A key assignment for enforcing access control policy exceptions. In: Proceedings on International Symposium on Internet Technology, Taipei, pp. 54-59.