skip to main content
10.1145/990036.990043acmconferencesArticle/Chapter ViewAbstractPublication PagessacmatConference Proceedingsconference-collections
Article

Succinct specifications of portable document access policies

Published: 02 June 2004 Publication History

Abstract

When customers need to each be given portable access rights to subset of documents from large universe of n vailable documents, it is often the case that the space vailable for representing each customer's access rights is limited to much less than n, say it is no more than m bits. This is the case when, e.g., limited-capacity inexpensive cards are used to store the access rights to huge multimedia document databases. How does one represent subsets of huge set of n elements,when only m bits re v il ble and m is much smaller than n? We use an approach reminiscent of Bloom filters, by assigning to each document subset of the m bits: If that document is in customer's subset then we set the corresponding bits to 1 on the customer's card. This guarantees that each customer gets the documents he paid for, but it also gives him access to documents he did not pay for ("false positives"). We want to do so in a manner that minimizes the expected total false positives under various deterministic and probabilistic models: In the former model we assume k customers whose respective subsets are known priori, whereas in the latter we assume (more realistically) that each document has probability of being included in customer's subset. We cannot use randomly assigned bits for each document (in the way Bloom filters do), rather we need to consider the priori knowledge (deterministic orprobabilistic) we are given in each model in order to better ssign subset of the m vailable bits to each of the n documents. We analyze and give efficient schemes for this problem.

References

[1]
M. Atallah and M. Bykova. "Portable and Flexible Document Access Control Mechanisms, "Working paper, 2004.]]
[2]
M. Atallah, K. Frikken, C. Black, S. Overstreet, and P. Bhatia. "Digital Rights Management, "Practical Handbook of Internet Computing Munindar Singh (Ed.), CRC Press, 2004.]]
[3]
M. Atallah and J. Li. "Enhanced Smart-card based License Management, "IEEE International Conference on E-Commerce (CEC), 24--27 June 2003, pp. 111--119.]]
[4]
T. Aura and D. Gollmann. "Software License Management with Smart Cards, "USENIX Workshop on Smart Card Technology USENIX Association, May 1999.]]
[5]
E. Bertino, B. Crminti, E. Ferrri, B. Thuraisingham and A. Gupta. "Selective and Authentic Third-party Distribution of XML Documents, "Working Paper, Sloan School of Management, MIT, 2002, http://papers.ssrn.com/sol3/papers.cfm? abstract id=299935.]]
[6]
E. Bertino, S. Castano and E. Ferrari. "On Specifying Security Policies for Web Documents with an XML-based Language, "SACMAT'01, Chantilly, USA, May 2001.]]
[7]
E. Bertino, S. Castano and E. Ferrari. "Securing XML Documents with Author-χ, "IEEE Internet Computing, Vol. 5, No. 3, pp. 21--31, 2001.]]
[8]
E. Bertino and E. Ferrari. "Secure and Selective Dissemination of XML Documents, "ACM Transactions on Information and System Security, Vol. 5, No. 3, August 2002, pp. 290--331.]]
[9]
B. Bloom. "Space/time trade-offs in hash coding with allowable errors. "Communications of the ACM, Vol . 13, No. 7, pp. 422--426, 1970.]]
[10]
A. Broder and M. Mitzenmacher. "Network Applications of Bloom Filters: A Survey, "Allerton Conference 2002.]]
[11]
D. Damiani, S. De Capitani Di Vimercati, S. Paraboschi and P. Samarati. "A Fine-Grained Access Control System for XML Documents, "ACM Transactions on Information and System Security, Vol. 5, No. 2, May 2002, pp.169--202.]]
[12]
P. Devanbu, M. Gertz, A. Kwong, C. Martel and G. Nuckolls. "Flexible Authentication of XML Documents, "CCS'01, Philadelphia, USA, November 2001.]]
[13]
L. Fan, P. Cao, J. Almeida and A. Broder, "Summary Cache: A Scalable Wide-Are Web Cache Sharing Protocol, "IEEE/ACM Transactions on Networking, Vol.8, No. 3, pp. 281--293, 2000.]]
[14]
M. Garey and D. Johnson. Computers and intractability: A guide to the theory of NP-completeness. Freeman, Oxford, UK, 1979.]]
[15]
M. Mitzenmacher, "Compressed Bloom Filters, "ACM symposium on Principles of distributed computing Newport,Rhode Island, US, August 2001.]]
[16]
S. Payette and C. Lagoze. "Policy-Carrying, Policy-Enforcing Digital Objects, "Research and Advanced Technology for Digital Libraries, 4th European Conference, ECDL 2002, Vol.1923, pp. 144--157, 2000.]]
[17]
M. Stonebraker and L. Rowe, "The Design of POSTGRES, "ACM SIGMOD Conference on Management of Data Washington, D.C., May 1986.]]
[18]
C. Wong and A. Yao. "A Combinatorial Optimization Problem Related to Data Set Allocation, "Revue Francaise D'Automatique, Informatique, Recherche Operationnelle, Suppl. No.5 (1976), pp.83--96.]]

Cited By

View all

Recommendations

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences
SACMAT '04: Proceedings of the ninth ACM symposium on Access control models and technologies
June 2004
182 pages
ISBN:1581138725
DOI:10.1145/990036
Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 02 June 2004

Permissions

Request permissions for this article.

Check for updates

Author Tags

  1. access control
  2. access control enforcement
  3. algorithm design
  4. compact policy representation
  5. computational complexity
  6. portable access rights

Qualifiers

  • Article

Conference

SACMAT04
Sponsor:

Acceptance Rates

Overall Acceptance Rate 177 of 597 submissions, 30%

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)0
  • Downloads (Last 6 weeks)0
Reflects downloads up to 14 Sep 2024

Other Metrics

Citations

Cited By

View all

View Options

Get Access

Login options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Media

Figures

Other

Tables

Share

Share

Share this Publication link

Share on social media