Towards secure information sharing using role-based delegation

As computing becomes more pervasive, information sharing occurs in broad, highly dynamic network-based environments. Such pervasive computing environments pose a difficult challenge in formally accessing the resources. The digital information generally represents sensitive and confidential information that organizations must protect and allow only authorized personnel to access and manipulate them. As organizations implement information strategies that call for sharing access to resources in the networked environment, mechanisms must be provided to protect the resources from adversaries. In this paper, we seek to address the issue of how to advocate selective information sharing while minimizing the risks of unauthorized access. We integrate a role-based delegation framework to propose a system architecture. We also demonstrate the feasibility of our framework through a proof-of-concept implementation.

随着计算变得越来越普及，信息共享发生在广泛的、高度动态的基于网络的环境中。这种普及的计算环境在对资源进行正式访问方面带来了严峻挑战。数字信息通常代表着敏感和机密信息，组织必须加以保护，并且只允许授权人员访问和操作。当组织实施信息策略，要求在网络环境中共享资源访问权限时，必须提供机制来保护资源免受敌手侵害。在本文中，我们试图解决如何在提倡选择性信息共享的同时将未经授权访问的风险降至最低的问题。我们集成了一个基于角色的委托框架来提出一种系统架构。我们还通过一个概念验证的实现展示了我们框架的可行性。