Access control over uncertain data
Access control over uncertain data
复制标题
对不确定数据的访问控制
DOI：
10.14778/1453856.1453945
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
Evan Welbourne
中科院分区：
文献类型：
--
作者：
Vibhor Rastogi;Dan Suciu;Evan Welbourne
访问控制是基于特定的上下文信息来管理对秘密信息的访问的问题。在传统应用程序中，上下文信息是确切知道的，从而允许简单的允许/拒绝语义。在本文中，我们研究了当上下文本身不确定时的访问控制。我们的激励应用是RFID数据管理，其中对象和人的位置以及它们之间的关联对于系统来说通常是不确定的，但对私有数据的访问是严格按照这些位置和关联来定义的。我们形式化了访问控制的自然语义，允许在存在不确定性的情况下发布部分信息，并描述了一个使用可证明的最优扰动函数来执行这些语义的算法。为了在实践中规范访问控制策略，我们描述了一种新的针对不确定数据的访问控制语言UCal。然后，我们描述了一个输出扰动算法来实现UCal描述的访问控制策略。我们进行了一组实验，证明了我们的方法的可行性，并确认了它比其他可能的方法，如阈值或抽样方法的优越性。
Access control is the problem of regulating access to secret information based on certain context information. In traditional applications, context information is known exactly, permitting a simple allow/deny semantics. In this paper, we look at access control when the context is itself uncertain. Our motivating application is RFID data management, in which the location of objects and people, and the associations between them is often uncertain to the system, yet access to private data is strictly defined in terms of these locations and associations.We formalize a natural semantics for access control that allows the release of partial information in the presence of uncertainty and describe an algorithm that uses a provably optimal perturbation function to enforce these semantics. To specify access control policies in practice, we describe UCAL, a new access control language for uncertain data. We then describe an output perturbation algorithm to implement access control policies described by UCAL. We carry out a set of experiments that demonstrate the feasibility of our approach and confirm its superiority over other possible approaches such as thresholding or sampling.