Collaborative Research: CT-ISG: Secure Knowledge Management: Models and Mechanisms

计算机技术的进步产生了大量数据，这推动了对数据库技术(特别是数据库管理系统)的研究，这种技术已被证明成功地保存和利用了不断增加的收集、生成或派生的数据。这个合作项目(IIS-0524612，徐寿怀，德克萨斯大学圣安东尼奥分校和IIS-0524462，Ravinderpal S.Sandhu，乔治梅森大学)预见了一个新时代的出现，在这个时代，在解决问题的过程中，分享从大量数据中获得的知识变得非常重要，例如商业决策。为了促进这一任务，本项目探索了一种技术方法，可以帮助实现一个称为知识管理系统的系统中间件-类似于数据库管理系统。特别是，这个项目侧重于解决这个设想的中间件的安全方面，其中包括安全的知识提取和安全的知识传播。这两个安全问题都是通过健全的安全模型和机制解决的。安全机制包括：(1)设计各种方案，包括加密和非加密，以促进安全和实用的知识提取；(2)制定方法，减轻知识传播过程中不可避免的知识泄露所造成的损害；(3)充分探讨(动态)以政策为导向的知识传播的概念及其基于加密的实施。这一跨机构合作项目将为研究生提供以团队为导向的学习和研究环境，研究成果也将融入教育课程。该项目的目的是将该项目所取得的成果，即知识管理和安全知识传播的模式和机制，纳入今后的知识管理系统的执行工作。该项目的结果将通过项目网站http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/.发布。

The advancement in computer technology produced large volumes of data, which motivated the investigation of database technology (especially database management systems) that has been proven successful in maintaining and utilizing the ever-increasing volumes of collected, generated or derived data. This collaborative project (IIS-0524612, Shouhuai Xu, University of Texas at San Antonio and IIS-0524462, Ravinderpal S. Sandhu, George Mason University) envisions the emergence of a new era in which it becomes important to share the knowledge derived from the large volumes of data in the process of problem solving, e.g., business decision-making. In order to facilitate such a task, this project explores technical methods that can help fulfill a system middleware called knowledge management systems -- analogous to the database management systems. In particular, this project focuses on addressing the security aspect of this envisioned middleware, which includes secure knowledge-extraction and secure knowledge-dissemination. Both security problems are addressed with sound security models and mechanisms. The security mechanisms include the following: (1) designing a variety of schemes, including cryptographic and non-cryptographic, to facilitate secure and practical knowledge-extraction; (2) developing methods for mitigation of the damage due to knowledge-breaching that is inevitable in the course of knowledge-dissemination; and (3) full exploration of the notion of (dynamic) policy-directed knowledge-dissemination and its cryptographic-based implementation. This inter-institutional collaborative project will provide a team-oriented learning and research environment for graduate students, and research results will also be integrated into educational courses. The aim for this project is that the results developed in this project, i.e., the models and mechanisms for knowledge management and safe knowledge dissemination will be integrated into the implementation of knowledge management systems in the future. The results of this project will be disseminated via the project web site http://www.cs.utsa.edu/~shxu/research/skm-nsf-2005/.