Collaborative Research: Secure Information Sharing in Internet-based Collaborative Applications

互联网革命导致世界各地的组织严重依赖互联网上的信息共享来开展日常业务。互联网上的信息共享通常发生在广泛的、高度动态的基于网络的环境中，并且以安全的方式正式访问资源构成了困难的挑战。我们的重点是在基于互联网的协作环境中的安全信息交换和安全信息访问的问题。研究目标如下。安全组通信。在协作工作和研究环境中，小组成员必须能够在他们之间建立可靠、安全的信息共享和通信媒介。将开发技术来建立安全的群组通信，并为群组成员提供一组访问高度动态网络中各种数字数据的权限。安全服务。数据库系统中的数字信息通常代表组织必须保护的敏感和机密信息，并且仅允许授权人员访问和操纵它们。本研究将探讨如何提倡在基于角色的系统中进行选择性的资讯分享，同时将未经授权存取的风险降到最低，并提出一个授权架构。我们的目标是通过政策规范，执行和概念验证的实施来证明我们的框架的可行性。

The Internet revolution has led organizations worldwide to rely heavily on information sharing over the Internet to conduct their daily business. Information sharing on the Internet usually occurs in broad, highly dynamic network-based environments, and formally accessing the resources in a secure manner poses a difficult challenge. Our focus is on the problems of secure information exchange and secure information access in Internet-based collaborative environments. The research objectives are as follows. Secure group communication. In collaborative work and research environments, group members must be able to set up a reliable, secure information sharing and communication medium among them. Techniques will be developed for setting up secure group communication and providing a set of accesses to group members for a variety of digital data in highly dynamic networks.Security services. Digital information in database systems generally represents sensitive and confidential information that organizations must protect and allow only authorized personnel to access and manipulate them. The research will address the issue of how to advocate selective information sharing in role-based systems while minimizing the risks of unauthorized access proposing a delegation framework. The objective is to demonstrate the feasibility of our framework through policy specification, enforcement, and a proof-of-concept implementation.