loading...
Using Attribute-Based Access Control to Enable Attribute-Based Messaging
Miami Beach, Florida, USA December 11-December 15
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ACSAC.2006.5322nd Annual Computer Security Applica ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Rakesh Bobba, University of Illinios Urbana-Champaign, USA
Omid Fatemieh, University of Illinois Urbana-Champaign, USA
Fariba Khan, University of Illinois Urbana-Champaign, USA
Carl A. Gunter, University of Illinois Urbana-Champaign, USA
Himanshu Khurana, University of Illinois Urbana-Champaign, USA
Attribute Based Messaging (ABM) enables message senders to dynamically create a list of recipients based on their attributes as inferred from an enterprise database. Such targeted messaging can reduce unnecessary communications and enhance privacy, but faces challenges in access control. In this paper we explore an approach to ABM based on deriving access control information from the same attribute database exploited by the addressing scheme. We show how to address three key challenges. First, we demonstrate a manageable access control system based on attributes. Second we show how this can be used with existing messaging systems to provide a practical deployment strategy. Third, we show that such a system can be efficient enough to support ABM for mid-size enterprises. Our implementation can dispatch ABM messages approved by XACML review for an enterprise of at least 60,000 users with only seconds of latency.
Citation:
Rakesh Bobba, Omid Fatemieh, Fariba Khan, Carl A. Gunter, Himanshu Khurana, "Using Attribute-Based Access Control to Enable Attribute-Based Messaging," acsac, pp.403-413, 22nd Annual Computer Security Applications Conference (ACSAC'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.