Collaborative Research: Secure Information Sharing in Internet-based Collaborative Applications

协作研究：基于互联网的协作应用程序中的安全信息共享

• 批准号: 0900970
• 负责人: Gail-Joon Ahn
• 金额: $ 6.17万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-07-01 至 2009-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0900970&HistoricalAwards=false
• 关键词: Collaborative; Research; Secure; Information; Sharing

The Internet revolution has led organizations worldwide to rely heavily on information sharing over the Internet to conduct their daily business. Information sharing on the Internet usually occurs in broad, highly dynamic network-based environments, and formally accessing the resources in a secure manner poses a difficult challenge. Our focus is on the problems of secure information exchange and secure information access in Internet-based collaborative environments. The research objectives are as follows. Secure group communication. In collaborative work and research environments, group members must be able to set up a reliable, secure information sharing and communication medium among them. Techniques will be developed for setting up secure group communication and providing a set of accesses to group members for a variety of digital data in highly dynamic networks.Security services. Digital information in database systems generally represents sensitive and confidential information that organizations must protect and allow only authorized personnel to access and manipulate them. The research will address the issue of how to advocate selective information sharing in role-based systems while minimizing the risks of unauthorized access proposing a delegation framework. The objective is to demonstrate the feasibility of our framework through policy specification, enforcement, and a proof-of-concept implementation.

互联网革命导致世界各地的组织严重依赖互联网上的信息共享来开展日常业务。互联网上的信息共享通常发生在广泛的、高度动态的基于网络的环境中，以安全的方式正式访问资源是一项艰巨的挑战。我们的重点是基于互联网的协作环境中的安全信息交换和安全信息访问问题。研究目标如下。确保群组通信安全。在协同工作和研究环境中，团队成员必须能够在他们之间建立一个可靠的、安全的信息共享和交流媒介。将开发用于建立安全群组通信并向群组成员提供对高度动态网络中的各种数字数据的一组访问的技术。数据库系统中的数字信息通常代表敏感和机密信息，组织必须保护这些信息，并且只允许授权人员访问和操纵这些信息。这项研究将解决如何在基于角色的系统中倡导选择性信息共享，同时将未经授权访问的风险降至最低的问题，并提出一个授权框架。我们的目标是通过策略规范、执行和概念验证实现来证明我们框架的可行性。