ShareEnabler: Policy-Driven Access Management for Ad-Hoc Collaborative Sharing

Abstract

Abstract. The rise of the Internet has introduced dramatic changes in managing and sharing digital resources among widely dispersed groups. This paper presents a policy-driven access management approach for ad-hoc collaboration to enable secure information sharing in heterogeneous network environments. In particular, we attempt to incorporate the features of distributed role-based access control, delegation and dissemination control to meet the fundamental access control requirements associated with resource originators. These features are realized in a set of XACML-based Role-based Originator Authorization policies (ROA). We propose a security architecture, called ShareEnabler, to achieve effective authorization and enforcement mechanisms in the context of Peerto-Peer (P2P) networking oriented file sharing. We briefly discuss our proof-of-concept prototype implementation based on an existing P2P file sharing toolkit developed by Lawrence Berkeley National Laboratory.

Policy-driven role-based access management for ad-hoc collaboration

“…We formally define the policy components and illustrate the prototype implementation we have developed. This article extends the work in [24][25][26], where the access control model and prototype system have been proposed. Especially, we extend the trust awareness feature in the framework by articulating the trust inference problem and we propose an algorithm to determine the trustworthiness of remote users beyond the compliance checking.…”

“…Under many circumstances, the establishment of collaboration relationship is highly dynamic and may vary tremendously in purpose, scope, size, duration and the number of involved participants. We refer this type of collaboration as ad-hoc collaboration [24][25][26]. Ad-hoc collaboration allows individual participants who belong to many different organizations to spontaneously establish or join collaborations, and dynamically perform a variety of activities such as communication, information sharing, cooperation, problem solving and negotiation [3,44].…”

Towards trust-aware access management for ad-hoc collaborations

“…As our future work, we would like to fully implement the RAMARS TM Engine into our secure resource sharing tool, ShareEnabler [9], [10], to provide trust-aware access management for both P2P and Grid collaborative sharing environments. In addition, trust negotiation [22], [23] will be explored as an iterative process of disclosing access control policies and exchanging credentials between the originator and the requesting party.…”