An end-to-end security approach for digital document management

Computer Journal

Volumn 59, Issue 7, 2016, Pages 1076-1090

  Munoz Hernandez, Mario Diego ^a   Morales Sandoval, Miguel ^b   Garcia Hernandez, Jose Juan ^b  

^a Ciudad Victoria   (Mexico)

^b DEPARTAMENTO DE FÍSICA   (Mexico)

Author keywords

digital document management; encryption; fingerprinting; insider threat tracing; security

Indexed keywords

ACCESS CONTROL; CRYPTOGRAPHY; INFORMATION SERVICES; LIFE CYCLE; NETWORK SECURITY;

ACCESS CONTROL MECHANISM; CRYPTOGRAPHIC TECHNIQUES; DIGITAL DOCUMENTS; FINGERPRINTING; FINGERPRINTING TECHNIQUES; INSIDER THREAT; SECURE DOCUMENT MANAGEMENT SYSTEM; SECURITY;

ELECTRONIC DOCUMENT EXCHANGE;

EID: 84982279617     PISSN: 00104620     EISSN: 14602067     Source Type: Journal    
DOI: 10.1093/comjnl/bxw002     Document Type: Article

References (51)

1. Kimberland, K. (2010). 2010 CybersecurityWatch Survey. Technical Report. Computer Emergency Response Team (CERT), Mass, EEUU
2. Liu, K., Trappe, W., Wang, Z., Wu, M., and Zhao, H. (2005). Multimedia Fingerprinting Forensics for Traitor Tracing. Hindawi Publishing Co, NY, USA
3. Jalil, Z., and Mirza, A. (2009). A Review of Digital Watermarking Techniques for Text Documents. Int. Conf. Information, and Multimedia Technology. ICIMT?09, Jeju Island, South Korea, December 16-18, pp. 230-234. IEEE, New Jersey, USA
4. Wang, Z.J., Wu, M., Trappe, W., and Liu, K.J.R. (2004). Grouporiented fingerprinting for multimedia forensics. EURASIP J. Appl. Signal Process., 2004, 2153-2173
5. Casey, T., Roe, M., Tuck, B., and Wilbur, S. (1989). Secure Automated Document delivery. Fifth Annual Computer Security Applications Conf., 1989, Tucson, AZ, December 4-8, pp. 348-356. IEEE, New Jersey, USA
6. Lioy, A., Maino, F., and Mezzalama, M. (1997). Secure Document Management, and Distribution in an Open Network Environment. ICICS?97 -Int. Conf. Information, and Communications, Beijing, China, November 11-14, pp. 109-117. Springer, Berlin
7. Shi, J., and Ouyang, J. (2005). eSign: An Enterprise Portal for Secure Document Management. 2005 IEEE Int. Conf. Information Reuse, and Integration, Las Vegas, NV, USA, August 15-17, pp. 481-486. IEEE, New Jersey, USA
8. Gerasimov, D. (2005). Creation of the System of Secure Document Circulation for State Organization. The 6th Annual 2005 Int. Siberian Workshop, and Tutorials on Electron Devices, and Materials, Erlagol, Altai, Russia, July 1-3, pp. 248-249. IEEE, New Jersey, USA
9. Kwok, T., and Nguyen, T. (2006). An Enterprise Electronic Contract Management System using Dual XML, and Secure PDF Documents. IEEE 10th Int. Enterprise Distributed Object Computing Conference Workshops, 2006. EDOCW?06, Hong Kong, China, October 16-20, pp. 57-60. IEEE, New Jersey, USA
10. Chieu, T., Nguyen, T., and Zeng, L. (2007). Secure Search of Private Documents in an Enterprise Content Management System. IEEE Int. Conf. e-Business Engineering, 2007, Hong Kong, China, October 24-26, pp. 105-112. IEEE, New Jersey, USA
11. Odagiri, K., Ishii, N., Yaegashi, R., and Tadauchi, M. (2009). A Distribution System of Document Medium with Copyright Protection. 10th ACIS Int. Conf. Software Engineering, Artificial Intelligences, Networking, and Parallel/Distributed Computing, 2009. SNPD, Daegu, South Korea, May 27-29, pp. 207-212. IEEE, New Jersey, USA
12. Bai, Y. (2008). Access Control for XML Document. In Nguyen, N., Borzemski, L., Grzech, A., and Ali, M. (eds), New Frontiers in Applied Artificial Intelligence, Lecture Notes in Computer Science 5027, pp. 621-630. Springer, Berlin, Germany
13. Sevinc, P., Basin, D., and Olderog, E.-R. (2006). Controlling Access to Documents: A Formal Access Control Model. Technical Report. University of Oldenburg, Oldenburg, Germany
14. Munier, M., Vincent, L., and Magali, R. (2012). Self-protecting Documents for Cloud Storage Security. IEEE 11th Int. Conf. Trust, Security, and Privacy in Computing, and Communications (TrustCom), Liverpool, UK, June 25-27, pp. 1231-1238. IEEE, New Jersey, USA
15. Adobe (2007) A Primer on Electronic Document Security. White Paper. Adobe Systems Incorporated, California, USA
16. Darwish, S. (2012). New system to fingerprint extensible markup language documents using winnowing theory. Signal Process. IET, 6, 348-357
17. Schleimer, S., Wilkerson, D.S., and Aiken, A. (2003). Winnowing: Local Algorithms for Document Fingerprinting. The 2003 ACM SIGMOD Int. Conf. Management of Data, SIGMOD?03, San Diego, CA, June 9-12, pp. 76-85. ACM, New York, NY, USA
18. Atallah, M., McDonough, C., Raskin, V., and Nirenburg, S. (2000). Natural Language Processing for Information Assurance, and Security: An Overview, and Implementations. The 2000 Workshop on New Security Paradigms, NSPW?00, New York, NY, USA, September 29-31, pp. 51-65. ACM, New York, NY, USA
19. Lu, P., Lu, Z., Zhou, Z., and Gu, J. (2008). An Optimized Natural Language Watermarking Algorithm based on TMR. The 9th Int. Conf. Young Computer Scientists CYCS, Shanghai, East China, November 18-21, pp. 1459-1463. IEEE, New Jersey, USA
20. Meral, H.M., Sankur, B., Özsoy, A.S., Güngör, T., and Sevinç, E. (2009). Natural language watermarking via morphosyntactic alterations. Comput. Speech Lang., 23, 107-125
21. Voybornova, O., and Macq, B. (2007). A Method of Text Watermarking Using Presuppositions. In Eduard, J., and Delp III, P.W. W. (eds), Security, Steganography, and Watermarking of Multimedia Contents IX, San Jose, CA, USA, January 29-February 1, pp. 1-10. SPIE, Bellingham, Washington, USA
22. Sun, X., and Asiimwe, A.J. (2005). Noun-verb Based Technique of Text Watermarking using Recursive Descent Semantic Net Parsers. The 1st Int. Conf. Advances in Natural Computation -Volume Part III, ICNC?05, Changsha, China, August 27-29, pp. 968-971. Springer, Berlin
23. He, J., and Zhang, H. (2008). Digital Right Management Model based on Cryptography, and Digital Watermarking. 2008 Int. Conf. Computer Science, and Software Engineering, Wuhan, China, December 12-14, pp. 656-660. IEEE, New Jersey, USA
24. Zaz, Y., and Fadil, L. (2011). Enhanced EPR Data Protection using Cryptography, and Digital Watermarking. 2011 Int. Conf. Multimedia Computing, and Systems (ICMCS), Ouarzazate, Morocco, April 7-9, pp. 1-5. IEEE, New Jersey, USA
25. Schick, R., and Ruland, C. (2011). Document Tracking -on the Way to a New Security Service. 2011 Conf. Network, and Information Systems Security (SAR-SSI), La Rochelle, France, May 18-21, pp. 1-5. IEEE, New Jersey, USA
26. Chor, B., Fiat, A., and Naor, M. (1994). Tracing Traitors. In Desmedt, Y. (ed.), Advances in Cryptology -CRYPTO?94, Lecture Notes in Computer Science 839, pp. 257-270. Springer, Berlin, Germany
27. Safavi-Naini, R., and Wang, Y. (2003). Sequential traitor tracing. IEEE Trans. Inf. Theory, 49, 1319-1326
28. Handel, T.G., and Sandford II, M.T. (1996). Hiding Data in the OSI Network Model. The 1st Int. Workshop on Information Hiding, Cambridge, UK, May 30-June 1, pp. 23-38. Springer, Berlin
29. Shah, M., and Patel, S. (2011). Network based Packet Watermarking using TCP/IP Protocol Suite. 2011 Nirma University Int. Conf. Engineering (NUiCONE), India, December 8-10, pp. 1-5. IEEE, New Jersey, USA
30. Hartung, F., Kesici, S., and Catrein, D. (2011). DRM Protected Dynamic Adaptive http Streaming. The 2nd Annual ACM Conf. Multimedia Systems, MMSys?11, San Jose, CA, USA, February 23-25, pp. 277-282. ACM, New York, NY, USA
31. Cauich, E., Gómez Cárdenas, R., and Watanabe, R. (2005). Data Hiding in Identification, and Offset IP Fields. In Ramos, F., Larios Rosillo, V., and Unger, H. (eds), Advanced Distributed Systems, Lecture Notes in Computer Science 3563, pp. 118-125. Springer, Berlin, Germany
32. Llamas, D., Allison, C., and Miller, A. (2006). Covert Channels in Internet Protocols: A Survey. Technical Report. University of St, and rews, Scotland, UK
33. Munoz-Hernandez, M.D., Garcia-Hernandez, J.J., and Morales-Sandoval, M. (2013). A collusion-resistant fingerprinting system for restricted distribution of digital documents. PLoS ONE, 8, 1-14
34. Kuribayashi, M. (2011). Hierarchical spread spectrum fingerprinting scheme based on CDMA technique. EURASIP J. Inf. Secur., 2011, 1-16
35. Munoz-Hernandez, M.D., Garcia-Hernandez, J.J., and Morales-Sandoval, M. (2014). Study on the Robustness to Retyping Attacks of Fingerprinted Digital Documents in the Frequential Domain. The 9th Int. Conf. Int. Technology, and Secured Transactions (ICITST-2014), London, UK, December 8-10, pp. 25-30. IEEE, New Jersey, USA
36. Adobe (2010) Making the case PDF/A, and Adobe Acrobat. White Paper. Adobe Systems Incorporated. http://goo.gl/F4ZkL (accessed September 28, 2013
37. Gupta, R., Karayil, A., and Rajendran, R. (2008). Contract lifecycle management. White paper. Infosys. http://goo.gl/aEQj9 (accessed September 28, 2013
38. Feldman, S., and Villars, R. (2006). The information lifecycle management imperative. White Paper. IDC Information, and data. http://goo.gl/4aOqo (accessed September 28, 2013
39. Adams, C., and Lloyd, S. (2002). Understanding PKI: Concepts, Standards, and Deployment Considerations (2nd edn). Addison-Wesley Longman Publishing Co., Inc., Boston, MA, USA
40. Krikor, L., Baba, S., Arif, T., and Shaaban, Z. (2009). Image encryption using DCT, and stream cipher. Eur. J. Sci. Res., 32, 48-58
41. Schmeh, K. (2010). A Taxonomy of Cryptographic Techniques for Securing Electronic Identity Documents. In Pohlmann, N., Reimer, H., and Schneider, W. (eds), Securing Electronic Business Processes. Springer, Germany
42. Zhao, G., Yang, X., Zhou, B., and Wei, W. (2010). RSA-based Digital Image Encryption Algorithm in Wireless Sensor Networks. 2nd Int. Conf. Signal Processing Systems (ICSPS), Dalian, July 5-7, pp.640-643. IEEE, New Jersey, USA
43. Gupta, K., Silakari, S., Gupta, R., and Khan, S. (2009). An Ethical Way of Image Encryption using ECC. First Int. Conf. Computational Intelligence, Communication Systems, and Networks, Tekanpur, India, July 23-25, pp. 342-345. IEEE, New Jersey, USA
44. Rivest, R.L., Shamir, A., and Adleman, L. (1978). A method for obtaining digital signatures, and public-key cryptosystems. Commun. ACM, 21, 120-126
45. Stallings, W. (2002). The advanced encryption standard. Cryptologia, 26, 165-188
46. National Institute of Standards Technology (NIST) (2002) SHA-2 standard. FIPS PUB 180-2
47. Barker, E.B., and Roginsky, A.L. (2013). Transitions: Recommendation for Transitioning the use of Cryptographic Algorithms, and Key Lengths. Technical Report. National Institute of Standards, and Technology, Gaithersburg, MD, United States
48. Frigo, M., and Johnson, S. (2005). The design, and implementation of FFTW3. Proc. IEEE, 93, 216-231
49. FrankWarmerdam, M.W., Kiselev, A., and Kelly, D. (2014). TIFF library, and utilities. http://www.libtiff.org/(accessed September 25, 2014
50. Independent JPEG Group (2014) Libjpeg. http://www.ijg.org/(accessed September 25, 2014
51. Gamma, E., Helm, R., Johnson, R., and Vlissides, J. (1994). Design Patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, UK.