Differential access for publicly-posted composite documents with multiple workflow participants

Balinsky, Helen; Simske, Steven J.

doi:10.1145/1860559.1860584

Cited by 11 publications

(29 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Recall that the Publicly Posted Composite Document (PPCD) technology [7], was developed to support the secure creation and management of composite documents, with variable sensitivity data in multi-user document workflows. PPCDs are designed to participate in cross-organizational workflow, which are not contained within one secure environment.…”

Section: Publicly Posted Composite Document Technologymentioning

confidence: 99%

“…In a workflow situation, this web-site "original" corresponds to a document version legitimately propagating along the workflow. According to [7] the access control for a composite document part i is enabled by 2 pairs of keys: encryption and decryption keys {E i , D i }, and signature and verification keys {S i , V i }. Each content-part P i is first encrypted and then signed:…”

Section: Part Accessmentioning

confidence: 99%

“…The related problem of providing a framework for ad hoc flexible documents is addressed in [6]. The problem of providing a fine-grained embedded self-contained access control for composite document first addressed in [7] through the introduction of Publicly Posted Composite Documents (PPCD) assembled from differently formatted variable sensitivity components. Exported straight out of any existing secure environment, PPCDs provide embedded access control and enforced workflow order that allows documents to be shipped freely between workflow participants with different access rights over potentially non-secure channels.…”

Section: Introductionmentioning

confidence: 99%

“…Exported straight out of any existing secure environment, PPCDs provide embedded access control and enforced workflow order that allows documents to be shipped freely between workflow participants with different access rights over potentially non-secure channels. The proposed in [7] only considered two basic workflow types:…”

Section: Introductionmentioning

confidence: 99%

“…However, such pure types of workflows are rarely occur in the real life. In the current paper we extend Publicly Posted Composite Documents technology ( [7]) to provide for any variably ordered workflows, where ordered and unordered steps are interleaved as required by a business logic. The challenge is to ensure that participants of any workflow step are unable to access a document before the document was accessed by all, at least, mandatory participants from the previous step.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Publicly Posted Composite Documents in Variably Ordered Workflows

Balinsky

Chen

Simske

2011

2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications

Self Cite

View full text Add to dashboard Cite

Recently-introduced Publicly Posted Composite Documents (PPCDs) address the problem of composite documents with different formats and differential access control participating in cross-organizational workflows distributed over potentially non-secure channels. An early version of the PPCD only considered two simplest workflow types: ordered and unordered. In real life, however, fragments of such pure types are likely to be combined into mixed workflows with interleaved ordered and unordered workflow steps. In the current paper, we introduce a payload matrix for a generic mixed workflow. We provide a computationally beneficial solution for enforcing access in ordered workflows by reducing the volume of data that needs to be encrypted and then subsequently decrypted. Furthermore, we address the problem of enforcing order in transitions between different types of workflow steps: from an unordered step to ordered steps and vice versa, and from one unordered step to another. This prevents the participants of any workflow step from being able to access a PPCD document prior to their workflow step.

show abstract

Section: Publicly Posted Composite Document Technologymentioning

confidence: 99%

Section: Part Accessmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Publicly Posted Composite Documents in Variably Ordered Workflows

Balinsky

Chen

Simske

2011

2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications

Self Cite

View full text Add to dashboard Cite

show abstract

Handling Environment for Publicly Posted Composite Documents

Balinsky

Pérez

2015

Lecture Notes in Business Information Processing

View full text Add to dashboard Cite

Recent business needs and requirements for complex cross-organizational workflows led to development of Publicly Posted Composite Documents (PPCD)-a multi-part document format retaining parts in their original formatting for usability, user convenience and information availability, while providing document security and built-in access control for inter-and intra-organizational document workflows distributed over low security channels. Developing PPCD Handling Environments-Authoring and Workflow Participant Access-for creating and accessing PPCD documents posed many new challenges: composition retention, secure access and management of multi-formatted, encrypted data on laptops and potentially low capability devices. The paper describes the use of OLE Automation, Add-Ons and System Call Interception technique to preserve the overall document composition, while the handling of individual parts is delegated to external tools, native for individual document formats.

show abstract