Controlling Access to Published Data Using Cryptography

Short Description
Cryptography. Gerome Miklau. Dan Suciu. {gerome, suciu}@cs.washington.edu …… cryptography [4]. Recall that in the definition of the access function …

Website: www.cs.washington.edu | Filesize: 720kb

Content
Controlling Access to Published Data Using
Cryptography
Gerome Miklau Dan Suciu
{gerome, suciu}@cs.washington.edu
University of Washington, Seattle, WA, USA
Abstract
We propose a framework for enforcing access control
policies on published XML documents using cryptography.
In this framework the owner publishes a
single data instance, which is partially encrypted,
and which enforces all access control policies. Our
contributions include a declarative language for access
policies, and the resolution of these policies
into a logical “protection model” which protects an
XML tree with keys. The data owner enforces an
access control policy by granting keys to users. The
model is quite powerful, allowing the data owner
to describe complex access scenarios, and is also
quite elegant, allowing logical optimizations to be
described as rewriting rules. Finally, we describe
cryptographic techniques for enforcing the protection
model on published data, and provide a performance
analysis using real datasets.
1 Introduction
There is an ever-increasing amount of data available
in digital form, and almost invariably that data is
now near a network. Recent research into integration
systems and peer-to-peer databases has created
new ways for diverse groups to share and process
data [23, 34, 21,…