Dynamic access-control policies on XML encrypted data

ACM Transactions on Information and System Security

Volumn 10, Issue 4, 2008, Pages

  Bouganim, Luc ^a,b   Ngoc, Francois Dang ^a,b,c   Pucheral, Philippe ^a,b,c  

^a UNIVERSITY OF VERSAILLES   (France)

^b INRIA ROCQUENCOURT   (France)

^c LABORATOIRE DES SCIENCES DU CLIMAT ET DE L ENVIRONNEMENT   (France)

Author keywords

Access control; Data confidentiality; Smartcard; Ubiquitous data management

Indexed keywords

ACCESS-CONTROL POLICIES; DATA CONFIDENTIALITY; SMARTCARDS; UBIQUITOUS DATA MANAGEMENT;

DATA PRIVACY; INFORMATION MANAGEMENT; PROBLEM ORIENTED LANGUAGES; SAFETY DEVICES; SERVERS; XML;

ACCESS CONTROL;

EID: 39149103087     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/1284680.1284684     Document Type: Article

References (56)

1. ABADI, M. AND WARINSCHI, B. 2005. Security analysis of cryptographically controlled access to XML documents. In Proceedings of the ACM SIGMOD International Conference on Management of Data, Baltimore, MD.
2. AKL, S. AND TAYLOR, P. 1983. Cryptographic solution to a problem of access-control in a hierarchy. ACM Transactions on Computer Systems (TOCS) 1, 3 (Aug.), 239-248.
3. AMER-YAHIA, S., CHO, S., LAKSHMANAN, L., AND SRIVASTAVA, D. 2001. Minimization of tree pattern queries. In Proceedings of the ACM SIGMOD International Conference on Management of Data. Santa Barbara, CA.
4. ARION, A., BONIFATI, A., COSTA, G., D'AGUANNO, S., MANOLESCU, I., AND PUGLIES, A. 2004. Efficient query evaluation over compressed data. In Proceedings of the 9th Extending Database Technology (EDBT) International Conference. Heraklion, Greece.
5. AXALTO E-GATE. 2004. Worldwide USB smartcard developer contest. 2nd ed. held at CTST, Washington, DC. http://www.egateopen.axalto.com.
6. AXALTO SIMAGINE 2005. Worldwide Mobile Communication and Java Card™ developer contest. 6th ed. held at 3GSM, Cannes, France, http://www.simagine.axalto.com.
7. AXALTO. SIMera - Classic SIM Card, http://www.axalto.com/ wireless/classic.asp.
8. BAYARDO, R., GRUHL, D., JOSIFOVSKI, V., AND MYLLYMAKI, J. 2004. An evaluation of binary XML encoding optimizations for fast stream based XML processing. In Proceedings of the 13th World Wide Web (WWW) International Conference. New York.
9. BERTINO, E., CASTAO, S., AND FERRARI, E. 2001. Securing XML documents with Author-X. In Proceedings of the IEEE International Conference on Internet Computing.
10. BIRGET, J.-C., ZOU, X., NOUBIR, G., AND RAMAMURTHY, B. 2001. Hierarchy-based access-control in distributed environments. In Proceedings of the IEEE International Conference on Communication (ICC), Saint Petersbourg, Russia.
11. BOUGANIM, B. AND PUCHERAL, P. 2002. Chip-secured data access: Confidential data on untrusted servers. In Proceedings of the 28th International Conference on Very Large Databases (VLDB), Hong Kong.
12. BOUGANIM, L., CREMARENCO, C., DANG NGOC, F., DIEU, N., AND PUCHERAL, P. 2005. Safe data sharing and data dissemination on smart devices. In Proceedings of the ACM SIGMOD International Conference on Management of Data. http://www-smis.inria.fr/Ecsxa.html.
13. BUNEMAN, P., GROHE, M., AND KOCH, C. 2003. Path queries on compressed XML. In Proceedings of the 29th International Conference on Very Large Databases (VLDB), Berlin, Germany.
14. CARMINATI, B., FERRARI, E., AND BERTINO, E. 2005. Securing XML data in third-party distribution systems. IN Proceedings of the 14th IEEE International Conference on Information and Knowledge Management (CIKM), Bremen, Germany.
15. CHAN, C., FELBER, P., GAROFALAKIS, M., AND RASTOGI, R. 2002. Efficient filtering of XML documents with XPath expressions. In Proceedings of the 18th International Conference on Data Engineering (ICDE), San Jose, CA.
16. CHANDRAMOULI, R. 2000. Application of XML tools for enterprise-wide RBAC implementation tasks. In Proceedings of the 5th ACM Workshop on Role-Based Access-Control, Berlin, Germany.
17. CHANG, T. AND HWANG, G. 2004. Using the extension function of XSLT and DSL to secure XML documents. In Proceedings of the 18th International Conference on Advanced Information Networking and Applications (AINA), Fukuoka, Japan.
18. CHEN, Y., MIHAILA, G., DAVIDSON, S., AND PADMANAHBAN, S. 2004. EXPedite: A system for encoded XML processing. In Proceedings of the 13th ACM International Conference on Information and Knowledge Management (CIKM), Washington, D.C.
19. CHO, S., AMER-YAHIA, S., LAKSHMANAN, L., AND SRIVASTAVA, D. 2002. Optimizing the secure evaluation of twig queries. In Proceedings of the 28th International Conference on Very Large Databases (VLDB), Hong Kong.
20. COMPUTER SECURITY INSTITUTE. 2003. CSI/FBI computer crime and security survey. http://www.gocsi.com/forms/fbi/pdf.html.
21. DAMIANI, E., DE CAPITANI DI VIMERCATI, S., PARABOSCHI, S., AND SAMARATI, P. 2002. A fine-grained access-control system for XML documents. ACM Transactions on Information and System Security (TISSEC) 5, 2, 169-202.
22. DEVANBU, P., GERTZ, M., KWONG, A., MARTEL, C., NUCKOLLS, G., AND STUBBLEBINE, S. 2001. Flexible authentification of XML documents. In Proceedings of the 8th ACM International Conference on Computer and Communication Security, Philadelphia, PA.
23. DIAO, Y. AND FRANKLIN, M. 2003. High-performance XML filtering: An overview of filter. In Proceedings of the 20th IEEE International Conference on Data Engineering (ICDE), Bangalore, India.
24. EL KALAM, A., BENFERHAT, S., MIEGE, A., BAIDA, R., CUPPENS, F., SAUREL, C., BALBIANI, P., DESWARTE, Y., AND TROUESSIN, G. 2003. Organization based access-control. In Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY). New York.
25. FAN, W., CHAN, C., AND GAROFALAKIS, M. 2004. Secure XML querying with security views. In Proceedings of the ACM SIGMOD International Conference on Management of Data, Paris, France.
26. FINANCE, B., MEDJOUB, S., AND PUCHERAL, P. 2005. The case for access-control on XML relationships. In Proceedings of the 14th IEEE International Conference on Information and Knowledge Management (CIKM), Bremen, Germany.
27. GABILLON, A. 2004. An authorization model for XML databases. In Proceedings of the ACM Workshop on Secure Web Services, Fairfax, VA.
28. GREEN, T., GUPTA, A., MIKLAU, G., ONIZUKA, M., AND SUCIU, D. 2004. Processing XML streams with deterministic automata and stream indexes. ACM Transaction on Database Systems (TODS) 29, 4 (Dec.), 752-788.
29. HACIGUMUS, H., IYER, B., LI, C., AND MEHROTRA, S. 2002. Executing SQL over encrypted data in the database-service-provider model. In Proceedings of the ACM SIGMOD International Conference on Management of Data, Madison, WI.
30. HE, J. AND WANG, M. 2001. Cryptography and relational database management systems. In Proceedings of the International Database Engineering and Applications Symposium (IDEAS), Grenoble, France.
31. HENDERSON, N. J., WHITE, N. M., AND HARTEL, P. H. 2001. iButton enrôlement and verification requirements for the pressure sequence smartcard biometric. In Proceedings of the International Conference on Research in SmartCards.
32. HOPCROFT, J. AND ULLMAN, J. 1979. Introduction to Automata Theory, Languages and Computation. Addison-Wesley, Reading, MA.
33. KUDO, M. AND HADA, S. 2000. XML document security based on provisional authorization. In Proceedings of the ACM International Conference on Computer and Communications Security (CCS), Athens, Greece.
34. MENEZES, A., OORSCHOT, P., AND VANSTONE, S. 1996. Handbook of Applied Cryptography. CRC Press, Boca Raton, FL.
35. MERKLE, R. 1989. A certified digital signature - Advances in cryptology. In Proceedings of Crypto, Santa Barbara, CA.
36. MICROSOFT, WINDOWS MICROSOFT MEDIA 9. http://www.microsoft.com/windows/windowsmedia/.
37. MIKLAU, G. AND SUCIU, D. 2002. Containment and equivalence for an XPath fragment. In Proceedings of the ACM International Conference on Principles of Database Systems (PODS), Madison, WI.
38. MIKLAU, G. AND SUCIU, D. 2003. Controlling access to published data using cryptography. In Proceedings of the 29th International Conference on Very Large Databases (VLDB), Berlin, Germany.
39. NG, W., OOI, B., TAN, K., AND ZHOU, A. 2003. Peerdb: A p2p-based system for distributed data sharing. In Proceedings of the IEEE International Conference on Data Engineering, Bangalore, India.
40. ODRL. The Open Digital Rights Language Initiative, http://odrl.net/.
41. PENG, F., AND CHAWATHE, S. 2003. XPath queries on streaming data. In Proceedings of the ACM SIGMOD International Conference on Management of Data, San Diego, CA.
42. RAY, I., RAY, I., AND NARASIMHAMURTHI, N 2002. A cryptographic solution to implement accesscontrol in a hierarchy and more. In Proceedings of the 9th ACM Symposium on Access-Control Models and Technologies (SACMAT), New York.
43. RAY, I. AND RAY, I. 2002. Using compatible keys for secure multicasting in e-commerce. In Proceedings of the 16th International Parallel and Distributed Processing Symposium (IPDPS), FL.
44. SAX PROJECT. Simple API for XML. http://www.saxproject.org/.
45. SCHNEIER, B. 1996. Applied Cryptography, 2nd ed., Wiley, New York.
46. SMARTRIGHT. The SmartRight Content Protection System, http://www.smartright.org/
47. TCPA. Trusted computing platform alliance, http://www.trustedcomputing. org/
48. TOLANI, P. AND HARITSA, J. 2002. XGRIND: A query-friendly XML compressor. In Proceedings of the 18th International Conference on Data Engineering (ICDE), San Jose, CA.
49. TOXGENE. The ToX XML Data Generator. http://www.cs.toronto.edu/tox/toxgene/.
50. UW XML. UW XML Data Repository. http://www.cs.washington.edu/research/ xmldatasets/.
51. VINGRALEK, R. 2002. GnatDb: A small-footprint, secure database system. In Proceedings of the 28th W3C International Conference on Very Large Databases (VLDB), Hong Kong.
52. W3C DOM. DOM: Document Object Model. http://www.w3.org/DOM.
53. W3C PICS. PICS: Platform for Internet Content Selection. http://www.w3.org/PICS.
54. W3C XMLENC. XML Encryption Requirements, http://www.w3.org/TR/xml- encryption-req
55. XACML. OASIS extensible access-control Markup Language (XACML). http://docs.oasis-open.org/xacml/2.0/access-control-xacml-2.0-core-spec-os.pdf.
56. XRML. XrML extendible rights Markup Language. http://www.xrml.org/