CAREER: A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments

[IIS-0545912] James B. D. Joshi jjoshi@mail.sis.pitt.edu匹兹堡大学，匹兹堡一个基于信任的访问控制管理框架，用于异构环境中的安全信息共享和多媒体工作流本研究的目标是解决与新兴的多域应用（EMA）环境相关的复杂的安全、隐私和数字版权管理问题，其特征是新兴的网格、P2P和移动的环境与多媒体和工作流技术。这样的EMA环境显示出巨大的潜力，有效地自动化跨异构管理域的工作流程，并促进前所未有的系统交互和信息和资源共享的水平。特别是，该项目采取了一个整体的方法来合成一个解决方案，结合（i）一个全面的信任为基础的，自适应的，基于内容和上下文的访问控制和安全的互操作框架，以促进在EMA环境中的组成域的交互，和（ii）一个全面的框架，用于解决与多媒体数据和工作流共享相关的隐私和数字版权管理问题。该研究将产生所需的理论，高效的算法，规范语言，谈判协议，分析和管理工具的基础上健全的设计原则和可用性的考虑，将在原型EMA环境中进行验证。预计研究结果将对开发安全的数据和资源密集型异构应用环境产生直接和长期的影响，并将大大有助于目前与保护国家和全球信息网格等复杂系统和基础设施有关的努力。研究结果将纳入匹兹堡大学的安全课程，并通过出版场所和项目网站（http：//www.sis.pitt.edu/jjoshi/nsfcareer/）传播，匹兹堡大学已被指定为信息保障教育方面的国家学术卓越中心。

[IIS-0545912] James B. D. Joshi jjoshi@mail.sis.pitt.edu University of Pittsburgh, Pittsburgh A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments The goal of this research is to address the complex security, privacy and digital rights management issues related to the emerging multidomain application (EMA) environments, which are characterized by the convergence of emerging grid, P2P and mobile environments with multimedia and workflow technologies. Such EMA environments show huge potential for efficiently automating workflow processes across heterogeneous administrative domains, and for facilitating unprecedented levels of system interactions and information and resource sharing. In particular, the project takes a holistic approach to synthesizing a solution that combines (i) a comprehensive trust-based, adaptive, content and context based access control and secure interoperation framework to facilitate the interaction of constituent domains in an EMA environment, and (ii) a comprehensive framework for addressing the privacy and digital rights management issues related to sharing of multimedia data and workflows. The research will produce required theory, efficient algorithms, specification languages, negotiation protocols, and analysis and administration tools founded on sound design principles and usability considerations which will be validated in a prototype EMA environment. The results are expected to have direct and long-term impact on developing secure data and resource intensive heterogeneous application environments, and will contribute significantly to current efforts related to the protection of complex systems and infrastructures such as the national and global information grid. The research results will be incorporated into the security curriculum of the University of Pittsburgh, which has been designated a national center of academic excellence in information assurance education, and disseminated through publication venues and the project website (http://www.sis.pitt.edu/~jjoshi/nsfcareer/).