Data is key: introducing the data-based access control paradigm

Wolter Pieters; Qiang Tang

doi:10.1007/978-3-642-03007-9_16

Data is key: introducing the data-based access control paradigm

Wolter Pieters, Qiang Tang

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Downloads (Pure)

Abstract

According to the Jericho forum, the trend in information security is moving the security perimeter as close to the data as possible. In this context, we suggest the idea of data-based access control, where decryption of data is made possible by knowing enough of the data. Trust is thus based on what someone already knows. A specific problem is defined as follows: given n pieces of data, an agent is able to recover all n items once she knows k of them. The problem is similar to both secure sketches and secret sharing, and we show that both can be used as a basis for constructions. Examples of possible applications are granting access without credentials, recovering forgotten passwords and sharing personal data in social networks.

Original language	Undefined
Title of host publication	Data and Applications Security 2009
Editors	E. Gudes, J. Vaidya
Place of Publication	Berlin
Publisher	Springer
Pages	240-251
Number of pages	12
ISBN (Print)	978-3-642-03006-2
DOIs	https://doi.org/10.1007/978-3-642-03007-9_16
Publication status	Published - Jul 2009
Event	23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security, DBSec 2009 - Montreal, Canada Duration: 12 Jul 2009 → 15 Jul 2009 Conference number: 23

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer Verlag
Volume	5645

Conference

Conference	23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security, DBSec 2009
Abbreviated title	DBSec
Country/Territory	Canada
City	Montreal
Period	12/07/09 → 15/07/09

Keywords

METIS-264411
De-perimeterisation
IR-67816
EWI-15728
secure sketches
data-based access control
SCS-Cybersecurity
secret sharing

Access to Document

10.1007/978-3-642-03007-9_16

http://eprints.eemcs.utwente.nl/secure2/15728/01/fulltext.pdf

Cite this

@inproceedings{5585443d09f64507871a52b22d377359,

title = "Data is key: introducing the data-based access control paradigm",

abstract = "According to the Jericho forum, the trend in information security is moving the security perimeter as close to the data as possible. In this context, we suggest the idea of data-based access control, where decryption of data is made possible by knowing enough of the data. Trust is thus based on what someone already knows. A specific problem is defined as follows: given n pieces of data, an agent is able to recover all n items once she knows k of them. The problem is similar to both secure sketches and secret sharing, and we show that both can be used as a basis for constructions. Examples of possible applications are granting access without credentials, recovering forgotten passwords and sharing personal data in social networks.",

keywords = "METIS-264411, De-perimeterisation, IR-67816, EWI-15728, secure sketches, data-based access control, SCS-Cybersecurity, secret sharing",

author = "Wolter Pieters and Qiang Tang",

note = "10.1007/978-3-642-03007-9_16 ; 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security, DBSec 2009 ; Conference date: 12-07-2009 Through 15-07-2009",

year = "2009",

month = jul,

doi = "10.1007/978-3-642-03007-9_16",

language = "Undefined",

isbn = "978-3-642-03006-2",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "240--251",

editor = "E. Gudes and J. Vaidya",

booktitle = "Data and Applications Security 2009",

address = "Germany",

}

Pieters, W & Tang, Q 2009, Data is key: introducing the data-based access control paradigm. in E Gudes & J Vaidya (eds), Data and Applications Security 2009., 10.1007/978-3-642-03007-9_16, Lecture Notes in Computer Science, vol. 5645, Springer, Berlin, pp. 240-251, 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security, DBSec 2009, Montreal, Canada, 12/07/09. https://doi.org/10.1007/978-3-642-03007-9_16

Data is key: introducing the data-based access control paradigm. / Pieters, Wolter; Tang, Qiang.
Data and Applications Security 2009. ed. / E. Gudes; J. Vaidya. Berlin: Springer, 2009. p. 240-251 10.1007/978-3-642-03007-9_16 (Lecture Notes in Computer Science; Vol. 5645).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Data is key: introducing the data-based access control paradigm

AU - Pieters, Wolter

AU - Tang, Qiang

N1 - Conference code: 23

PY - 2009/7

Y1 - 2009/7

N2 - According to the Jericho forum, the trend in information security is moving the security perimeter as close to the data as possible. In this context, we suggest the idea of data-based access control, where decryption of data is made possible by knowing enough of the data. Trust is thus based on what someone already knows. A specific problem is defined as follows: given n pieces of data, an agent is able to recover all n items once she knows k of them. The problem is similar to both secure sketches and secret sharing, and we show that both can be used as a basis for constructions. Examples of possible applications are granting access without credentials, recovering forgotten passwords and sharing personal data in social networks.

AB - According to the Jericho forum, the trend in information security is moving the security perimeter as close to the data as possible. In this context, we suggest the idea of data-based access control, where decryption of data is made possible by knowing enough of the data. Trust is thus based on what someone already knows. A specific problem is defined as follows: given n pieces of data, an agent is able to recover all n items once she knows k of them. The problem is similar to both secure sketches and secret sharing, and we show that both can be used as a basis for constructions. Examples of possible applications are granting access without credentials, recovering forgotten passwords and sharing personal data in social networks.

KW - METIS-264411

KW - De-perimeterisation

KW - IR-67816

KW - EWI-15728

KW - secure sketches

KW - data-based access control

KW - SCS-Cybersecurity

KW - secret sharing

U2 - 10.1007/978-3-642-03007-9_16

DO - 10.1007/978-3-642-03007-9_16

M3 - Conference contribution

SN - 978-3-642-03006-2

T3 - Lecture Notes in Computer Science

SP - 240

EP - 251

BT - Data and Applications Security 2009

A2 - Gudes, E.

A2 - Vaidya, J.

PB - Springer

CY - Berlin

T2 - 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security, DBSec 2009

Y2 - 12 July 2009 through 15 July 2009

ER -