Not logged in.

Contribution Details

Type Conference or Workshop Paper
Scope Discipline-based scholarship
Published in Proceedings Yes
Title Distributed privilege enforcement in PACS
Organization Unit
Authors
  • C Sturm
  • E Hunt
  • M H Scholl
Editors
  • E Gudes
  • J Vaidya
Presentation Type paper
Item Subtype Original Work
Refereed Yes
Status Published in final form
Language
  • English
ISBN 978-3-642-03006-2
ISSN 1611-3349
Page Range 142 - 158
Event Title 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec 2009)
Event Type conference
Event Location Montreal, Canada
Event Start Date July 12 - 2009
Event End Date July 15 - 2009
Series Name Lecture Notes in Computer Science
Number 5645/2
Place of Publication Berlin / Heidelberg
Publisher Springer
Abstract Text We present a new access control mechanism for P2P networks with distributed enforcement, called P2P Access Control System (PACS). PACS enforces powerful access control models like RBAC with administrative delegation inside a P2P network in a pure P2P manner, which is not possible in any of the currently used P2P access control mechanisms. PACS uses client-side enforcement to support the replication of confidential data. To avoid a single point of failure at the time of privilege enforcement, we use threshold cryptography to distribute the enforcement among the participants. Our analysis of the expected number of messages and the computational effort needed in PACS shows that its increased flexibility comes with an acceptable additional overhead.
Digital Object Identifier 10.1007/978-3-642-03007-9_10
Other Identification Number merlin-id:247
PDF File Download from ZORA
Export BibTeX
EP3 XML (ZORA)
Additional Information The original publication is available at www.springerlink.com