Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability.Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics.The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.

Abstract-Efficient use and re-use of traffic data depends on an ITS architecture that enables information sharing across a wide variety of intelligent transportation systems and applications. Existing ITS architectures, such as KAREN or the National ITS architecture, can be used to develop systems within a given framework thereby facilitating such intersystem integration. However, these architectures typically include assumptions regarding the overall organization of system functionality that prohibit integration of previously deployed systems without major reengineering. This paper presents a framework for an ITS architecture that has been designed for integrating novel as well as existing intelligent transportation systems and applications. The iTransIT framework supports a number of possible systems interaction paradigms and proposes a layered data model to facilitate data exchange between systems with diverse service requirements and functional organizations. These data layers are defined within a common context model, may be distributed across multiple systems, and exploit the overlapping temporal and spatial aspects of information generated and used by both legacy and future systems.

No abstract

Abstract-This paper presents a model-driven approach to developing pervasive computing applications that exploits designtime information to support the engineering of planning and optimisation algorithms that reflect the presence of uncertainty, dynamism and complexity in the application domain. In particular the task of generating code to implement planning and optimisation algorithms in pervasive computing domains is addressed.We present a layered domain model containing a set of objectoriented specifications for modelling physical and sensor/actuator infrastructure and state-space information. Our model-driven engineering approach is implemented in two transformation algorithms. The initial transformation parses the domain model and generates a planning model for the application being developed that encodes an application's states, actions and rewards. The second transformation parses the planning model and selects and seeds a planning or optimisation algorithm for use in the application.We present an empirical evaluation of the impact of our approach on the development effort associated with a pervasive computing application from the Intelligent Transportation Systems (ITS) domain, and provide a quantitative evaluation of the performance of the algorithms generated by the transformations.

Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability.Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics.The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.