CAREER: A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments

[0545912]James B.D.Joshi@mail.sis.bitt.edu of Pittsburgh，Pittsburgh一个基于信任的访问控制管理框架，用于异质环境中的安全信息共享和多媒体工作流本研究的目标是解决与新兴的多域应用环境相关的复杂的安全、隐私和数字版权管理问题，其特征是新兴的网格、P2P和移动环境与多媒体和工作流技术的融合。这种EMA环境显示出巨大的潜力，可以有效地实现跨不同管理域的工作流程自动化，并促进前所未有的系统交互以及信息和资源共享。特别是，该项目采取了一种全面的方法来综合一个解决方案，该解决方案结合了(I)全面的、基于信任的、自适应的、基于内容和背景的访问控制和安全的互操作框架，以促进EMA环境中组成域之间的互动，以及(Ii)用于解决与共享多媒体数据和工作流程有关的隐私和数字权利管理问题的综合框架。该研究将根据合理的设计原则和可用性考虑因素，产生所需的理论、高效算法、规范语言、协商协议以及分析和管理工具，并将在原型EMA环境中进行验证。这些成果预计将对开发安全的数据和资源密集型不同应用环境产生直接和长期的影响，并将大大促进目前与保护国家和全球信息网格等复杂系统和基础设施有关的努力。研究成果将被纳入匹兹堡大学的安全课程，该大学已被指定为全国信息保障教育学术卓越中心，并通过出版场所和项目网站(http://www.sis.pitt.edu/~jjoshi/nsfcareer/).)传播

[IIS-0545912] James B. D. Joshi jjoshi@mail.sis.pitt.edu University of Pittsburgh, Pittsburgh A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments The goal of this research is to address the complex security, privacy and digital rights management issues related to the emerging multidomain application (EMA) environments, which are characterized by the convergence of emerging grid, P2P and mobile environments with multimedia and workflow technologies. Such EMA environments show huge potential for efficiently automating workflow processes across heterogeneous administrative domains, and for facilitating unprecedented levels of system interactions and information and resource sharing. In particular, the project takes a holistic approach to synthesizing a solution that combines (i) a comprehensive trust-based, adaptive, content and context based access control and secure interoperation framework to facilitate the interaction of constituent domains in an EMA environment, and (ii) a comprehensive framework for addressing the privacy and digital rights management issues related to sharing of multimedia data and workflows. The research will produce required theory, efficient algorithms, specification languages, negotiation protocols, and analysis and administration tools founded on sound design principles and usability considerations which will be validated in a prototype EMA environment. The results are expected to have direct and long-term impact on developing secure data and resource intensive heterogeneous application environments, and will contribute significantly to current efforts related to the protection of complex systems and infrastructures such as the national and global information grid. The research results will be incorporated into the security curriculum of the University of Pittsburgh, which has been designated a national center of academic excellence in information assurance education, and disseminated through publication venues and the project website (http://www.sis.pitt.edu/~jjoshi/nsfcareer/).