CAREER: A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments

[is -0545912]基于信任的访问控制管理框架在异构环境下的安全信息共享和多媒体工作流研究的目标是解决与新兴多域应用（EMA）环境相关的复杂安全、隐私和数字版权管理问题，这些环境以新兴网格的融合为特征。具有多媒体和工作流技术的P2P和移动环境。这样的EMA环境显示出巨大的潜力，可以跨异构管理域高效地自动化工作流过程，促进前所未有的系统交互、信息和资源共享。特别是，该项目采用整体方法来综合解决方案，该解决方案结合了(i)一个全面的基于信任的、自适应的、基于内容和上下文的访问控制和安全互操作框架，以促进EMA环境中组成域的交互，以及（ii）一个全面的框架，用于解决与多媒体数据和工作流程共享相关的隐私和数字版权管理问题。该研究将产生所需的理论、有效的算法、规范语言、协商协议以及基于合理设计原则和可用性考虑的分析和管理工具，这些将在原型EMA环境中进行验证。研究结果预计将对开发安全数据和资源密集型异构应用环境产生直接和长期的影响，并将对当前与保护复杂系统和基础设施（如国家和全球信息网格）相关的工作做出重大贡献。研究结果将被纳入被指定为国家信息保障教育卓越中心的匹兹堡大学的保安课程，并通过出版物和项目网站（http://www.sis.pitt.edu/~jjoshi/nsfcareer/）进行宣传。

[IIS-0545912] James B. D. Joshi jjoshi@mail.sis.pitt.edu University of Pittsburgh, Pittsburgh A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments The goal of this research is to address the complex security, privacy and digital rights management issues related to the emerging multidomain application (EMA) environments, which are characterized by the convergence of emerging grid, P2P and mobile environments with multimedia and workflow technologies. Such EMA environments show huge potential for efficiently automating workflow processes across heterogeneous administrative domains, and for facilitating unprecedented levels of system interactions and information and resource sharing. In particular, the project takes a holistic approach to synthesizing a solution that combines (i) a comprehensive trust-based, adaptive, content and context based access control and secure interoperation framework to facilitate the interaction of constituent domains in an EMA environment, and (ii) a comprehensive framework for addressing the privacy and digital rights management issues related to sharing of multimedia data and workflows. The research will produce required theory, efficient algorithms, specification languages, negotiation protocols, and analysis and administration tools founded on sound design principles and usability considerations which will be validated in a prototype EMA environment. The results are expected to have direct and long-term impact on developing secure data and resource intensive heterogeneous application environments, and will contribute significantly to current efforts related to the protection of complex systems and infrastructures such as the national and global information grid. The research results will be incorporated into the security curriculum of the University of Pittsburgh, which has been designated a national center of academic excellence in information assurance education, and disseminated through publication venues and the project website (http://www.sis.pitt.edu/~jjoshi/nsfcareer/).