Trust aware information flow management in online data stores

点击翻译按钮获取中文摘要

Many major online service providers including Bell are providing online data storage services. These servicesprovide large storage capacities to users. They have very high availabilities with proper data backup andprotection mechanisms that ensure the safety of the stored data. Although there are other benefits for usingonline storage, sharing is one of the major ones. The complexity of the sharing problem is related to the natureof the data that is handled by the data store. In most online storage systems, theaccess control is at a primitive state. In this proposal, we develop a new access control strategy that takes theuser affinities from social networks and applies them in the access control process. This allows the user toautomate many access control decisions. One of the challenges in using social networks is that the raw "linkdistances" between users is not representative of the affinities between the users. Therefore, we develop avirtual distance measure between users that better reflects the desire to share or not share data between users.Another important function with regard to online storage is alert - i.e., messaging the users when data itemsthat are of interest and accessible to them are available in the online storage. While the alerting mechanism istightly linked to the access control, it also should consider the interests of the users in receiving the alerts. Ourresearch considers confidentiality requirements for unmodifiable data and integrity requirements for updateabledata.