Policy Evolution in Distributed Usage Control

A. Pretschner; F. Schütz; C. Schaefer; T. Walter

doi:10.1016/j.entcs.2009.07.042

Policy Evolution in Distributed Usage Control

A. Pretschner, F. Schütz, C. Schaefer, T. Walter

Research output: Contribution to journal › Article › peer-review

16 Scopus citations

Abstract

Usage control is a generalization of access control that also addresses how data is handled after it is released. Controlling the future usage of data includes controlling the future distribution of data. The evolution of policies upon re-distribution must hence be defined. Intuitively, clients should only strengthen policies associated with a data item when they re-distribute it. We provide a role-based re-distribution model for usage control that encompasses strengthening both rights and duties. By introducing orderings for events and parameter values we show how both rights and duties can be strengthened with the traditional abstraction of trace inclusion.

Original language	English
Pages (from-to)	109-123
Number of pages	15
Journal	Electronic Notes in Theoretical Computer Science
Volume	244
DOIs	https://doi.org/10.1016/j.entcs.2009.07.042
State	Published - 1 Aug 2009
Externally published	Yes

Keywords

Usag control
access control

Access to Document

10.1016/j.entcs.2009.07.042

Cite this

@article{aff57c5196f94c7aa3414b5e5e240234,

title = "Policy Evolution in Distributed Usage Control",

abstract = "Usage control is a generalization of access control that also addresses how data is handled after it is released. Controlling the future usage of data includes controlling the future distribution of data. The evolution of policies upon re-distribution must hence be defined. Intuitively, clients should only strengthen policies associated with a data item when they re-distribute it. We provide a role-based re-distribution model for usage control that encompasses strengthening both rights and duties. By introducing orderings for events and parameter values we show how both rights and duties can be strengthened with the traditional abstraction of trace inclusion.",

keywords = "Usag control, access control",

author = "A. Pretschner and F. Sch{\"u}tz and C. Schaefer and T. Walter",

year = "2009",

month = aug,

day = "1",

doi = "10.1016/j.entcs.2009.07.042",

language = "English",

volume = "244",

pages = "109--123",

journal = "Electronic Notes in Theoretical Computer Science",

issn = "1571-0661",

publisher = "Elsevier B.V.",

}

TY - JOUR

T1 - Policy Evolution in Distributed Usage Control

AU - Pretschner, A.

AU - Schütz, F.

AU - Schaefer, C.

AU - Walter, T.

PY - 2009/8/1

Y1 - 2009/8/1

N2 - Usage control is a generalization of access control that also addresses how data is handled after it is released. Controlling the future usage of data includes controlling the future distribution of data. The evolution of policies upon re-distribution must hence be defined. Intuitively, clients should only strengthen policies associated with a data item when they re-distribute it. We provide a role-based re-distribution model for usage control that encompasses strengthening both rights and duties. By introducing orderings for events and parameter values we show how both rights and duties can be strengthened with the traditional abstraction of trace inclusion.

AB - Usage control is a generalization of access control that also addresses how data is handled after it is released. Controlling the future usage of data includes controlling the future distribution of data. The evolution of policies upon re-distribution must hence be defined. Intuitively, clients should only strengthen policies associated with a data item when they re-distribute it. We provide a role-based re-distribution model for usage control that encompasses strengthening both rights and duties. By introducing orderings for events and parameter values we show how both rights and duties can be strengthened with the traditional abstraction of trace inclusion.

KW - Usag control

KW - access control

UR - http://www.scopus.com/inward/record.url?scp=67651154463&partnerID=8YFLogxK

U2 - 10.1016/j.entcs.2009.07.042

DO - 10.1016/j.entcs.2009.07.042

M3 - Article

AN - SCOPUS:67651154463

SN - 1571-0661

VL - 244

SP - 109

EP - 123

JO - Electronic Notes in Theoretical Computer Science

JF - Electronic Notes in Theoretical Computer Science

ER -

Policy Evolution in Distributed Usage Control

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this