Collaborative Research: CT-ISG: Secure Knowledge Management: Models and Mechanisms

计算机技术的进步产生了大量的数据，这推动了对数据库技术（特别是数据库管理系统）的研究，这种技术已被证明在维护和利用不断增加的收集、生成或派生数据量方面是成功的。这个合作项目（IIS-0524612，徐首淮，德克萨斯大学圣安东尼奥分校和IIS-0524462， Ravinderpal S. Sandhu，乔治梅森大学）设想了一个新时代的出现，在这个新时代，在解决问题的过程中，分享从大量数据中获得的知识变得非常重要，例如，商业决策。为了促进这样的任务，本项目探索了可以帮助实现称为知识管理系统的系统中间件的技术方法——类似于数据库管理系统。特别地，这个项目侧重于解决这个设想的中间件的安全方面，包括安全的知识提取和安全的知识传播。这两个安全问题都可以通过健全的安全模型和机制来解决。安全机制包括：(1)设计多种方案，包括加密和非加密，以促进安全实用的知识提取；(2)制定减轻知识传播过程中不可避免的知识泄露损害的方法；(3)充分探索（动态）政策导向知识传播的概念及其基于密码学的实现。这个跨机构合作项目将为研究生提供一个以团队为导向的学习和研究环境，研究成果也将整合到教育课程中。该项目的目的是将该项目的成果，即知识管理和安全知识传播的模型和机制，整合到未来知识管理系统的实施中。该项目的结果将通过该项目的网站http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/发布。

The advancement in computer technology produced large volumes of data, which motivated the investigation of database technology (especially database management systems) that has been proven successful in maintaining and utilizing the ever-increasing volumes of collected, generated or derived data. This collaborative project (IIS-0524612, Shouhuai Xu, University of Texas at San Antonio and IIS-0524462, Ravinderpal S. Sandhu, George Mason University) envisions the emergence of a new era in which it becomes important to share the knowledge derived from the large volumes of data in the process of problem solving, e.g., business decision-making. In order to facilitate such a task, this project explores technical methods that can help fulfill a system middleware called knowledge management systems -- analogous to the database management systems. In particular, this project focuses on addressing the security aspect of this envisioned middleware, which includes secure knowledge-extraction and secure knowledge-dissemination. Both security problems are addressed with sound security models and mechanisms. The security mechanisms include the following: (1) designing a variety of schemes, including cryptographic and non-cryptographic, to facilitate secure and practical knowledge-extraction; (2) developing methods for mitigation of the damage due to knowledge-breaching that is inevitable in the course of knowledge-dissemination; and (3) full exploration of the notion of (dynamic) policy-directed knowledge-dissemination and its cryptographic-based implementation. This inter-institutional collaborative project will provide a team-oriented learning and research environment for graduate students, and research results will also be integrated into educational courses. The aim for this project is that the results developed in this project, i.e., the models and mechanisms for knowledge management and safe knowledge dissemination will be integrated into the implementation of knowledge management systems in the future. The results of this project will be disseminated via the project web site http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/.