A Framework for Composition and Enforcement of Privacy-Aware and Context-Driven Authorization Mechanism for Multimedia Big Data
A Framework for Composition and Enforcement of Privacy-Aware and Context-Driven Authorization Mechanism for Multimedia Big Data
复制标题
DOI：
10.1109/tmm.2015.2458299
复制
发表时间：
2015-07
影响因子：
7.3
通讯作者：
Arjmand Samuel;M. Sarfraz;H. Haseeb;Saleh M. Basalamah;A. Ghafoor
中科院分区：
文献类型：
--
作者：
Arjmand Samuel;M. Sarfraz;H. Haseeb;Saleh M. Basalamah;A. Ghafoor
用于传播和共享大量信息的多媒体大数据的激增引发了重要的安全和隐私问题。其中之一是隐私策略的制定和执行，以安全地管理多媒体大数据的访问。一些研究人员指出，为了正确执行隐私政策，应在访问控制系统中捕获隐私要求。在本文中，我们提出了一种混合方法，在访问控制系统中捕获隐私要求，并提出隐私策略的组成和执行框架。重点是允许用户（而不是系统或安全管理员）为其在线多媒体数据制定无冲突策略。另一个要求是此类策略必须具有上下文感知能力。我们还提出了一种验证隐私政策的方法，以确保正确性和逻辑一致性。验证过程还用于确保在执行隐私规则时不会违反敏感的安全要求。一个名为智能隐私管理器（iPM）的原型已经实现，用于以安全和私密的方式共享多媒体大数据。
The proliferation of multimedia big data for dissemination and sharing of massive amounts of information raises important security and privacy concerns. One such concern is the composition and enforcement of privacy policies in order to securely manage access of multimedia big data. Several researchers have pointed out that for proper enforcement of privacy policies, the privacy requirements should be captured in access control systems. In this paper, we propose a hybrid approach where privacy requirements are captured in an access control system and present a framework for composition and enforcement of privacy policies. The focus is to allow a user, not a system or security administrator to compose conflict free policies for their online multimedia data. An additional requirement is that such a policy be context-aware. We also present a methodology for verifying the privacy policy in order to ensure correctness and logical consistency. The verification process is also used to ensure that sensitive security requirements are not violated when privacy rules are enforced. A prototype, named Intelligent Privacy Manager (iPM), has been implemented for sharing of multimedia big data in a secure and private manner.