Collaborative Research: CT-ISG: Secure Knowledge Management: Models and Mechanisms

计算机技术的进步产生了大量的数据，这激发了对数据库技术（特别是数据库管理系统）的研究，该技术已被证明在维护和利用不断增加的收集、生成或导出的数据量方面是成功的。本合作项目（IIS-0524612，Shouhuai Xu，University of Texas at圣安东尼奥and IIS-0524462，Ravinderpal S. Sandhu，乔治梅森大学）设想了一个新时代的出现，在这个新时代中，在解决问题的过程中共享从大量数据中导出的知识变得重要，例如，商业决策。为了促进这一任务，本项目探索了技术方法，可以帮助实现一个称为知识管理系统的系统中间件-类似于数据库管理系统。特别是，这个项目的重点是解决这个设想的中间件，其中包括安全的知识提取和安全的知识传播的安全方面。这两个安全问题都可以通过可靠的安全模型和机制来解决。其安全机制包括：（1）设计各种方案，包括加密和非加密的方案，以促进安全和实用的知识提取;（2）开发方法以减轻知识传播过程中不可避免的知识泄露所造成的损害;以及（3）充分探索（动态）政策导向的知识传播的概念及其基于密码学的实现。这个跨机构的合作项目将为研究生提供一个以团队为导向的学习和研究环境，研究成果也将被纳入教育课程。该项目的目的是，该项目所取得的成果，即，今后将把知识管理和安全传播知识的模式和机制纳入知识管理系统的实施工作。该项目的结果将通过项目网站http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/传播。

The advancement in computer technology produced large volumes of data, which motivated the investigation of database technology (especially database management systems) that has been proven successful in maintaining and utilizing the ever-increasing volumes of collected, generated or derived data. This collaborative project (IIS-0524612, Shouhuai Xu, University of Texas at San Antonio and IIS-0524462, Ravinderpal S. Sandhu, George Mason University) envisions the emergence of a new era in which it becomes important to share the knowledge derived from the large volumes of data in the process of problem solving, e.g., business decision-making. In order to facilitate such a task, this project explores technical methods that can help fulfill a system middleware called knowledge management systems -- analogous to the database management systems. In particular, this project focuses on addressing the security aspect of this envisioned middleware, which includes secure knowledge-extraction and secure knowledge-dissemination. Both security problems are addressed with sound security models and mechanisms. The security mechanisms include the following: (1) designing a variety of schemes, including cryptographic and non-cryptographic, to facilitate secure and practical knowledge-extraction; (2) developing methods for mitigation of the damage due to knowledge-breaching that is inevitable in the course of knowledge-dissemination; and (3) full exploration of the notion of (dynamic) policy-directed knowledge-dissemination and its cryptographic-based implementation. This inter-institutional collaborative project will provide a team-oriented learning and research environment for graduate students, and research results will also be integrated into educational courses. The aim for this project is that the results developed in this project, i.e., the models and mechanisms for knowledge management and safe knowledge dissemination will be integrated into the implementation of knowledge management systems in the future. The results of this project will be disseminated via the project web site http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/.