A geotemporal role-based authorisation system

International Journal of Information and Computer Security

Volumn 1, Issue 1-2, 2007, Pages 143-168

  Atluri, Vijayalakshmi ^a   Chun, Soon Ae ^b  

^a RUTGERS UNIVERSITY   (United States)

^b CITY UNIVERSITY OF NEW YORK   (United States)

Author keywords

access control; authorisation systems; geospatial databases; information and computer security

Indexed keywords

EID: 77955962072     PISSN: 17441765     EISSN: 17441773     Source Type: Journal    
DOI: 10.1504/ijics.2007.012247     Document Type: Article

References (38)

1. Adam, N.R., Atluri, V., Bertino, E. and Ferrari, E. (2002) ‘A content-based authorization model for digital libraries’, IEEE Transactions on Knowledge and Data Engineering, Vol. 14, pp.296–315.
2. Atluri, V. and Chun, S. (2004) ‘An authorisation model for geospatial data’, IEEE Transactions on Dependable and Secure Computing, Vol. 1, pp.238–254.
3. Atluri, V. and Gal, A. (2002) ‘An authorisation model for temporal and derived data: securing information portals’, ACM Transactions on Information Systems Security, Vol. 5, pp.62–94.
4. Atluri, V. and Huang, W-K. (1996) ‘An authorization model for workflows’, Paper presented at the Fifth European Symposium on Research in Computer Security, Rome, Italy, and Lecture Notes in Computer Science, Springer-Verlag, pp.44–64. In proceedings.
5. Barclay, T., Gray, J. and Slutz, D. (1999) ‘Microsoft terraserver: a spatial data warehouse’, Technical report, Microsoft Research, Advanced Technology Division Microsoft Corporation, Redmond, WA.
6. Barclay, T., Gray, J., Strand, E., Ekblad, S. and Richter, J. (2002) ‘Terraservice.net: an introduction to web services’, Technical report, Microsoft Research, Advanced Technology Division, Technical Report MS-TR-2002-53.
7. Bertino E., Damiani M.L. and Momini D. (2004) ‘An access control system for a web map management service’, Paper presented at the 14th International Workshop on Research Issues in Data Engineering, Web Services for E-Commerce and E-Government Applications, 28–29 March 2004, Boston, MA, (pp.33–39). IEEE Computer Society. In proceedings.
8. Bertino, E., Castano, S., Ferrari, E. and Mesiti, M. (2000) ‘Specifying and enforcing access control policies for XML document sources’, World Wide Web Journal, Vol. 3, pp.139–151.
9. Bertino, E., Catania, B., Damiani, M.L., and Perlasca, P. (2005) ‘Geo-rbac: a spatially aware rbac’, Paper presented at the SACMAT ‘05: the 10th ACM symposium on Access control models and technologies, pp.29–37, In proceedings.
10. Bertino, E., Hammad, M.A., Aref, W.G. and Elmagarmid, A.K. (2000b) ‘An access control model for video database systems’, Paper presented at the CIKM. In proceedings.
11. Castano, S., Fugini, M., Martella, G. and Samarati, P. (1994) Database Security. Reading, MA: Addison-Wesley.
12. Celik, M., Sharma, G., Saber, E. and Tekalp, A. (2001) ‘A hierarchical image authentication watermark with improved localization and security’, Paper presented at the IEEE International Conference on Image Processing (ICIP 2001), pp.502–505, Thessaloniki, Greece. In proceedings.
13. Chun, S. and Atluri, V. (2000) ‘Protecting privacy from continuous high-resolution satellite surveillance’, Paper presented at the 14th IFIP WG 11.3 Workshop on Database Security, pp.399–420. In proceedings.
14. CIMIC Rutgers University (2002) NASA Regional Application Centre. Available at: http://cimic.rutgers.edu/rac/.
15. Damiani, E., di Vimercati, S.D.C., Fernandez-Medina, E. and Samarati, P. (2003) ‘An access control system for SVG documents’, Paper presented at the DBSec, IFIP Conference, Cambridge, UK. In proceedings.
16. Damiani, E., di Vimercati, S.D.C., Paraboschi, S. and Samarati, P. (2000) ‘Design and implementation of an access control processor for XML documents’, Paper presented at the Ninth International World Wide Web Conference (WWW9). In proceedings.
17. Fu, S. and Xu, C-Z. (2005). ‘A coordinated spatio-temporal access control model for mobile computing in coalition environments’, Paper presented at the 19th IEEE International Parallel and Distributed Processing Symposium (IPDPS’05) – Workshop 17. In proceedings.
18. Google Earth (2004) Google acquires Keyhole Corp, Google Press Center, Available at: http://www.google.com/press/pressrel/keyhole.html
19. Haines, L. (2005) South Korea throws strop at Google Earth: military installations laid bare. The Register, Available at: http://www.theregister.co.uk/2005/08/31/google_earth_korea/
20. Hulsebosch, R., Salden, A., Bargh, M., Ebben, P. and Reitsma, J. (2005) ‘Context sensitive access control’, paper presented at SACMAT ‘05: the tenth ACM symposium on Access control models and technologies, pp.111–119. In proceedings.
21. Keyhole Inc. (2001) Keyhole’s EarthViewer Technology, System demo presented at Vortex 2001, http://www.keyhole.com//body.php?h=news&t=20010522
22. Keyhole Inc. (2001) ‘Keyhole’s EarthViewer technology’, System demo presented at Vortex 2001, Available at: http://ww.keyhole.com//body.php?h=news&t=20010522
23. Kudo, M. and Hada, S. (2000) ‘XML document security based on provisional authorization’, Paper presented at the ACM Conference on Computer and Communication Security (CCS 2000). In proceedings.
24. Rosenthal, A., Sciore, E. and Doshi, V. (1999) ‘Security administration for federations, warehouses, and other derived data’, Paper presented at IFIP WG 11.3 Thirteenth International Conference on Database Security, pp.209–223. In proceedings.
25. Samarati, P., Bertino, E. and Jajodia, S. (1996) ‘An authorisation model for a distributed hypertext system’, IEEE Transactions on Knowledge and Data Engineering, Vol. 8, pp.555–562.
26. USGS (2004) ‘USGS Node of the National Geospatial Data Clearinghouse, Available at: http://nsdi.usgs.gov/,
27. Wang, J., Li, J., Wiederhold, G. and Firschein, O. (1998) ‘System for classifying objectionable websites’, Paper presented at the International Workshop on Interactive Distributed Multimedia Systems and Telcommunication Services, Vol. 1483, pp.113–124, Springer Verlag. In proceedings.
28. Wong, P. (1998) ‘A public key watermark for image verification and authentication’, Paper presented at the IEEE International Conference on Image Processing, pp.425–429, Chicago, USA. In proceedings.
29. Zhang, G. and Parasher, M. (2003) ‘Dynamic context-aware access control for grid applications’, Paper presented at the 4th International Workshop on Grid Computing, pp.101–108. In proceedings.
30. Zhang, J. and Xiong, F. (2004) ‘A novel watermarking for image security’, Paper presented at the 19th International Symposium of Computer and Information Sciences (ISCIS 2004), Kemer- Antalya, Turkey. In proceedings.
31. http://earth.google.com
32. This figure is based on the time of this report.
33. http://earth.google.com/coverage/coverage_list.pdf
34. In the strictest sense, subjects include the users and the processes invoked by the users.
35. Available at http://cimic.rutgers.edu/spatial
36. http://www.njmeadowlands.gov
37. For example: http://www.geocode.com/eagle.html-ssi
38. The PKI and public certificate can be used to authenticate not only the user’s identity but also the user’s past scene (geotemporal) credentials.