Enhancing privacy and authorization control scalability in the grid through ontologies

IEEE Transactions on Information Technology in Biomedicine

Volumn 13, Issue 1, 2009, Pages 16-24

  Blanquer, I ^a   Hernandez V ^a   Segrelles, D ^a   Torres, E ^a  

^a UNIVERSITAT POLITÈCNICA DE VALÈNCIA   (Spain)

Author keywords

Grid; Ontologies; Open grid services architecture (OGSA); Security; Web service resource framework (WSRF)

Indexed keywords

AUTHORIZATION POLICY; DATA GRID; GRID; OPEN GRID SERVICES ARCHITECTURE (OGSA); PERSONAL DATA; PRIVACY-ENHANCING TECHNIQUES; SECURITY; UNAUTHORIZED USERS; WEB SERVICE RESOURCE FRAMEWORK (WSRF);

GRID COMPUTING; MEDICAL IMAGING; ONTOLOGY; PUBLIC KEY CRYPTOGRAPHY; WEB SERVICES;

SERVICE ORIENTED ARCHITECTURE (SOA);

ACCESS TO INFORMATION; ARTICLE; COMPUTER SECURITY; CONFIDENTIALITY; DATA BASE; FACTUAL DATABASE; HUMAN; INFORMATION RETRIEVAL; INTERNET; MEDICAL RECORD; METHODOLOGY; PRIVACY;

ACCESS TO INFORMATION; COMPUTER SECURITY; CONFIDENTIALITY; DATABASE MANAGEMENT SYSTEMS; DATABASES, FACTUAL; HUMANS; INFORMATION STORAGE AND RETRIEVAL; INTERNET; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; PRIVACY;

EID: 63449126327     PISSN: 10897771     EISSN: None     Source Type: Journal    
DOI: 10.1109/TITB.2008.2003369     Document Type: Article

References (35)

1. I. E. Magnin and J. Montagnat, "The grid and the biomedical community: Achievements and open issues," presented at the EGEE User Forum, CERN, Geneva, Switzerland, Mar. 1-3, 2006.
2. J.M. Schopf, "Grids: The top ten questions," Sci. Program., vol. 10, no. 2, pp. 103-111, 2002.
3. Ł. Skitał, R. Słota, D. Nikolow, and J. Kitowski, "Methodology for virtual organisation design and management," presented at the EGEE User Forum, CERN, Geneva, Switzerland, Mar. 1-3, 2006.
4. I. Blanquer, V. Hernandez, and J. D. Segrelles, "An OGSA middleware for managing medical images using ontologies," J. Clin. Monit. Comput. vol. 19, pp. 295-305, Oct. 2005.
5. Digital Imaging and Communications in Medicine (DICOM) - Part 10: Media Storage and File Format for Media Interchange, National Electrical Manufacturers Association, Rosslyn, VA, 2008.
6. I. Blanquer, V. Hernandez, and D. Segrelles, "TRENCADIS - A WSRF grid middle ware for managing DICOM structured reporting objects," Stud. Health Technol. Inf., vol. 120, pp. 381-391, 2006.
7. Ciberinfraestructura Valenciana deImagen Médica Oncológica (CVIMO). (2008). [Online]. Available: http://www.grycap.upv.es/cvimo
8. V. Breton, K. Dean, and T. Solomonides, Eds., "The Healthgrid white paper," in From Grid Healthgrid - Proc. Healthgrid 2005, Stud. Health Technol. Inf. vol. 112. Amsterdam, The Netherlands: IOS Press, pp. 249-321.
9. J. Montagnat, Á. Frohner, D. Jouvenot, C. Pera, P. Kunszt, B. Koblitz, N. Santos, C. Loomis, R. Texier, D. Lingrand, P. Guio, R. Brito Da Rocha, A. Sobreira de Almeida, and Z. Farkas, "A secure grid medical data manager interfaced to the gLite middleware," J. Grid Comput. (JGC), vol. 6, no. 1, pp. 45-59, Mar. 2008.
10. C. Blanchet, R. Mollon, and G. Deléage, "Building an encrypted file system on the EGEE grid: Application to protein sequence analysis," in Proc. 1st IEEE Int. Conf. Availability, Rel. Security (ARES 2006), pp. 965-973.
11. EGEE: Enabling Grids for E-sciencE (Phase I and II). FP6 European IST Project, Contract Number INFSO-RI-508833. (2008). [Online]. Available: http://www.eu-egee.org
12. World Wide Web Computing Grid. Distributed Production Environment of Physics Data Processing. (2008). [Online]. Available: http:// lcg.web.cern.ch/LCG
13. S. Varrette, J. L. Roch, J. Montagnat, J. M. Pierson, L. Seitz, and F. Leprevost, "Safe distributed architecture for image-based computer assisted diagnosis," presented at the IEEE Int. Conf. Pervasive Serv. (ICPS 2006), Workshop Health Pervasive Syst., Lyon, France, Jun. 2006.
14. L. Seitz, J. M. Pierson, and L. Brunie, "Encrypted storage of medical data on a grid," Methods Inf. Med., vol. 44, no. 2, pp. 198-201, Feb. 2005.
15. D. Scardaci and G. Scuderi, "A secure storage service for the gLite middleware," in Proc. IAS 2007 - 3rd Int. Symp. Inf. Assurance Security, Manchester, U.K., pp. 261-266.
16. gLite middleware. (2008). [Online]. Available: http://www.glite.org
17. M. Hadzic and E. Chang, "Role of the ontologies in the context of grid computing and application for the human disease studies," in Proc. Int. Conf. Semantics Networked World - Semantics Grid Databases (ICSNW 2004), pp. 316-318.
18. T. Moses, Ed., eXtensible Access Control Markup Language (XACML) Version 2.0, OASIS Standard, 2005.
19. OASIS Security Services TC. (2005). Security Assertion Markup Language (SAML), v2.0 [Online]. Available: http://www.oasis-open.org/committees/ tc_home.php?wg_abbrev=security (10.02.2007).
20. C. Schläger, T. Priebe, M. Liewald, and G. Pernul, "Enabling attribute-based access control in authentication and authorisation infrastructures," presented at the 20th Bled eConference "eMergence" (Bled 2007), Bled, Slovenia.
21. B. Lang, I. Foster, F. Siebenlist, R. Ananthakrishnan, and T. Freeman, "Attribute based access control for grid computing," Math. Comput. Sci. (MCS) Div., Argonne Nat. Lab., Argonne, IL, Preprint ANL/ MCS-P1367-0806, Aug. 2006.
22. W. Xiaopeng, L. Junzhou, S. Aibo, andM. Teng, "Semantic access control in grid computing," in Proc. 11th Int.Conf. Parallel Distrib. Syst. (ICPADS 2005), vol. 1, pp. 661-667.
23. B. Shields, O. Molloy, G. Lyons, and J. Duggan, "Securing web services using semantic web technologies," in Proc. 1st Int. IFIP/WG12.5 Working Conf. Ind. Appl. Semantic Web (IASW 2005), pp. 213-222.
24. Towards Open Grid services Architecture. (2008). [Online]. Available: http://www.globus.org/ogsa
25. The Web Services Resource Framework. (2008). [Online]. Available: http:// www.globus.org/wsrf
26. Grid Security Infrastructure. (2008). [Online]. Available: http:// www.globus.org/security/overview.html
27. M. Thompson, A. Essiari, and S. Mudumbai, "Certificate-based authorization policy in a PKI environment," ACM Trans. Inf. Syst. Security (TISSEC), vol. 6, no. 4, pp. 566-588, Nov. 2003.
28. D. Chadwick and A. Otenko, "The PERMIS X.509 role based privilege management infrastructure," Future Generation Comput. Syst., vol. 19, no. 2, pp. 277-289, Feb. 2003.
29. V. Welch, T. Barton, K. Keahey, and F. Siebenlist, "Attributes, anonymity and access: Shibboleth and globus integration to facilitate grid collaboration," presented at the 4th Annual PKI R&D Workshop, Gaithersburg, MD, Apr. 2005.
30. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell'Agnello, Á. Frohner, A. Gianoli, K. Lörentey, and F. Spataro, "VOMS - An authorization system for virtual organizations," presented at the 1st Eur. Across Grids Conf., Santiago de Compostela, Spain, 2003.
31. S. Tuecke, D. Engert, I. Foster, V. Welch, M. Thompson, L. Pearlman, and C. Kesselman, "Internet x509 Public key Infrastructure Proxy Certificate Profile," The Internet Society, Reston, VA, draft-ggf-gsi-proxy-04, 2002.
32. FIP 197. (2001, Nov. 26). Announcing the Advanced Encryption Standard [Online]. Available: http://www.csrc.nist.gov/publications/fips/fips197/ fips-197.pdf
33. A. Shamir, "How to share a secret," Commun. ACM, vol. 22, pp. 612-613, 1979.
34. E. Torres, C. de Alfonso, I. Blanquer, and V. Hernandez, "Privacy protection in HealthGrid: Distributing encryption management over the VO," in Proc. HealthGrid 2006, Stud. Health Technol. Inf., vol. 120, pp. 131-141.
35. I. Blanquer,V. Hernandez, D. Segrelles, and E. Torres, "Long-term storage and management of encrypted biomedical data in real scenarios," in Proc. Int. Conf. Emerging Security Inf., Syst., Technol. (SECURWARE 2007), Valencia, Spain, pp. 77-82.