Trust aware information flow management in online data stores

包括贝尔在内的许多主要在线服务提供商都在提供在线数据存储服务。这些服务为用户提供了大容量的存储。它们具有非常高的可用性，并具有适当的数据备份和保护机制，以确保存储数据的安全。虽然使用在线存储还有其他好处，但共享是主要的好处之一。共享问题的复杂性与数据存储处理的数据的性质有关。在大多数在线存储系统中，访问控制处于原始状态。在该方案中，我们开发了一种新的访问控制策略，该策略从社交网络中提取用户的亲和度，并将其应用于访问控制过程。这允许用户自动执行许多访问控制决策。使用社交网络面临的一个挑战是，用户之间的原始“链接距离”并不能代表用户之间的亲和力。因此，我们开发了一个用户之间的虚拟距离度量，它更好地反映了用户之间共享或不共享数据的愿望。关于在线存储的另一个重要功能是警报-即当在线存储中有他们感兴趣且可访问的数据项时向用户发送消息。虽然警报机制与访问控制紧密相连，但它在接收警报时也应该考虑用户的利益。我们的研究考虑了不可修改数据的机密性要求和可更新数据的完整性要求。

Many major online service providers including Bell are providing online data storage services. These servicesprovide large storage capacities to users. They have very high availabilities with proper data backup andprotection mechanisms that ensure the safety of the stored data. Although there are other benefits for usingonline storage, sharing is one of the major ones. The complexity of the sharing problem is related to the natureof the data that is handled by the data store. In most online storage systems, theaccess control is at a primitive state. In this proposal, we develop a new access control strategy that takes theuser affinities from social networks and applies them in the access control process. This allows the user toautomate many access control decisions. One of the challenges in using social networks is that the raw "linkdistances" between users is not representative of the affinities between the users. Therefore, we develop avirtual distance measure between users that better reflects the desire to share or not share data between users.Another important function with regard to online storage is alert - i.e., messaging the users when data itemsthat are of interest and accessible to them are available in the online storage. While the alerting mechanism istightly linked to the access control, it also should consider the interests of the users in receiving the alerts. Ourresearch considers confidentiality requirements for unmodifiable data and integrity requirements for updateabledata.