Experiences with the enforcement of access rights extracted from ODRL-based digital contracts

DRM 2003: Proceedings of the Third ACM Workshop on Digital Rights Management

Volumn , Issue , 2003, Pages 90-102

  Guth, Susanne ^a   Neumann, Gustaf ^a   Strembeck, Mark ^a  

^a VIENNA UNIVERSITY OF ECONOMICS AND BUSINESS   (Austria)

Author keywords

Design; Experimentation; Security

Indexed keywords

COMPUTER SOFTWARE; COPYRIGHTS; CRYPTOGRAPHY; DECISION MAKING; MATHEMATICAL MODELS; PROBLEM SOLVING;

ACCESS RIGHTS; CONTRACT SCHEMA (COSA); ODRL-BASED DIGITAL CONTRACTS; RIGHTS EXPRESSION LANGUAGES (REL);

DIGITAL CONTROL SYSTEMS;

EID: 18844450721     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/947390.947392     Document Type: Conference Paper

References (38)

1. A. Le Hors, et al. Document Object Model (DOM) Level 2 Core Specification. http://www.w3.org/DOM/, November 2000.
2. R. Anderson and M. Kuhn. Tamper Resistance - a Cautionary Note. In Proc. of the 2nd USENIX Workshop on Electronic Commerce, November 1996.
3. M. Bartel, J. Boyer, B. Fox, B. LaMacchia, and E. Simon. XML-Signature Syntax and Processing. http://www.w3.org/TR/xmldsig-core/, February 2002. W3 Consortium Recommendation.
4. T. Berners-Lee, R. Fielding, and L. Masinter. Uniform Resource Identifiers (URI): Generic Syntax. IETF RFC 2396, Standards Track, http://www.ietf.org/rfc/rfc2396.txt, August 1998.
5. A. Beugnard, J.-M. Jezequel, N. Plouzeau, and D. Watkins. Making Components Contract Aware. IEEE Computer Magazine, 32(7), July 1999.
6. J. Camenisch, J.M. Piveteau, and M. Stadler. An Efficient Fair Payment System. In Proc. of ACM Conference on Computer and Communications Security, 1996.
7. J. Clark and S. DeRose. XML Path Language (XPath). http://www.w3.org/TR/xpath, November 1999. W3 Consortium Recommendation.
8. ContentGuard Inc. eXtensible rights Markup Language (XrML), Version 2.0. http://www.xrml.org/, November 2001.
9. T. DeMartini, X. Wang, and B. Wragg. MPEG-21 Working Documents - Part 5 & Part 6, MPEG-21 Rights Expression Language. http://www.chiariglione.org/mpeg/ working_documents.htm, March 2003.
10. D. C. Fallside. eXtenisble Markup Language (XML) Schema Specification 1.0. http://www.w3.org/TR/XML/Schema/, May 2001. W3 Consortium Candidate Recommendation.
11. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D.R. Kuhn, and R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and System Security, 4(3), August 2001.
12. K. Fujimura and Y. Nakajima. General-Purpose Digital Ticket Framework. In Proc. of the 3rd USENIX Workshop on Electronic Commerce, September 1998.
13. S. Guth, G. Neumann, and M. Strembeck. Toward a Conceptual Framework for Digital Contract Composition and Fulfillment. In Proc. of the International Workshop for Technology, Economy, Social and Legal Aspects of Virtual Goods, May 2003.
14. S. Guth, B. Simon, and U. Zdun. A Contract and Rights Management Framework Design for Interacting Brokers. In Proc. of the 36th Hawaii International Conference on System Sciences, January 2003.
15. R. Housley and T. Polk. Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructure. John Wiley & Sons, 2001.
16. R. Iannella. Open Digital Rights Language (ODRL), Version 1.1. http://odrl.net, August 2002.
17. ITU-T. ITU-T Recommendation X.500: Information Technology-Open Systems Interconnection-The Directory: Overview of Concepts, Models and Services, 1993.
18. J. Loewer and R. Ade. tDOM (DOM Implementation). available at: http://www.tdom.org/, 2003.
19. A. Keller, G. Kar, H. Ludwig, A. Dan, and J.-L. Hellerstein. Managing Dynamic Services: A Contract Based Approach to a Conceptual Architecture. In Proc. of the 8th IEEE/IFIP Network Operations and Management Symposium (NOMS), April 2002.
20. C.E. Landwehr. Formal Models for Computer Security. ACM Computing Surveys, 13(3), September 1981.
21. D. Lie, C. Thekkath, M. Mitchell, P. Lincoln, D. Boneh, J. Mitchell, and M. Horowitz. Architectural Support for Copy and Tamper Resistant Software. In Proc. of the 6th International Conference on Architectural Support for Programming Languages and Operating Systems, November 2000.
22. Machine Readable Cataloging (MARC) Standards Office. MARC Code List for Relators, Sources, Description Conventions. http://www.loc.gov/marc/relators/, January 2003.
23. G. Medvinsky and C. Neuman. NetCash: A Design for Practical Electronic Currency on the Internet. November 1993.
24. G. Neumann and M. Strembeck. Design and Implementation of a Flexible RBAC-Service in an Object-Oriented Scripting Language. In Proc. of the 8th ACM Conference on Computer and Communications Security (CCS), November 2001.
25. G. Neumann and M. Strembeck. An Approach to Engineer and Enforce Context Constraints in an RBAC Environment. In Proc. of the 8th ACM Symposium on Access Control Models and Technologies (SACMAT), June 2003.
26. G. Neumann and U. Zdun. XOTcl, an Object-Oriented Scripting Language. In Proc. of Tcl2k: 7th USENIX Tcl/Tk Conference, February 2000.
27. National Information Standards Organization (NISO). Syntax for the Digital Object Identifier. http://www.niso.org/standards/, December 2000.
28. J.K. Ousterhout. Tel and the Tk Toolkit. Addison-Wesley, 1994.
29. J. Park and R. Sandhu. Originator Control in Usage Control. In Proc. of the 3rd International Workshop on Policies for Distributed Systems and Networks, June 2002.
30. J. Park and R. Sandhu. Towards Usage Control Models: Beyond Traditional Access Control. In Proc. of the 7th ACM Symposium on Access Control Models and Technologies (SACMAT), June 2002.
31. J.S. Park and R.Sandhu. Smart Certificates: Extending X.509 for Secure Attribute Services on the Web. In Proc. of 22nd National Information Systems Security Conference (NISSC), October 1999.
32. J.S. Park and R. Sandhu. RBAC on the Web by Smart Certificates. In Proc. of the ACM Workshop on Role-Based Access Control, October 1999.
33. J.S. Park and R. Sandhu. Secure Cookies on the Web. IEEE Internet Computing, 4(4), July/August 2000.
34. B. Pfitzmann and M. Waidner. Strong Loss Tolerance of Electronic Coin Systems. ACM Transactions on Computer Systems, 15(2), May 1997.
35. L.R. Rivest. Electronic Lottery Tickets as Micropayments. In R. Hirschfeld, editor, Financial Cryptography. Springer Verlag, November 1997.
36. S.Godik and T.Moses (eds.). eXtensible Access Control Markup Language (XACML) Version 1.0. OASIS Standard, February 2003.
37. B. Shand and J. Bacon. Policies in Accountable Contracts. In Proc, of the 3rd International Workshop on Policies for Distributed Systems and Networks, June 2002.
38. J.G. Steiner, C. Neuman, and J.I. Schiller. Kerberos: An Authentication Service for Open Network Systems. In Proc. of the USENIX Winter Conference, February 1988.