Uniform Indexing for Geospatial Data and Authorizations

Abstract

High-resolution satellites are promising technologies to bolster global transparency by providing unprecedented access to accurate and timely information. A significant number in this satellite fleet are owned by private organizations, which can collect images of human activities and the environment, and make them commercially available around the globe. Uncontrolled dissemination of this information may have grave implications on national security and personal privacy, as some governments and private groups may exploit this information for aggressive purposes. Formal policies for prohibiting the release of imagery beyond a certain resolution, and notifying when an image crosses an international boundary or when such a request is made, are beginning to emerge. As such, there is a need for effective and efficient schemes for facilitating controlled dissemination of satellite imagery and the information products generated from it. Unlike conventional authorizations that can be implemented as access control lists, since authorizations on geospatial imagery involve spatial attributes, managing the authorization base and searching for authorizations based on the spatial extent require a spatial indexing structure. An access request thus requires a search on two index structures, one for the authorizations, and the other for the image database. In this paper, we propose an indexing structure, called RMXquadtree, that is capable of indexing multi-resolution satellite imagery and additionally allow representing authorizations on top of it. By employing a uniform index for both image database and authorization base, access requests can be processed more efficiently as only one index structure need to be traversed. We demonstrate how authorizations with privilege modes such as view and zoom-in can be implemented using the RMX -quadtree.

Access control models for geo-social computing systems

“…Spatially aware access control mechanisms can be traced back to [19,5] (which address the information sharing concerns of satellite images in Geographical Information Systems) or [33,42] (which propose architectures for locationbased applications in wireless local networks).…”

“…Note also that the set U ∩succ j H (u) is essentially equivalent to succ j H[U ] (u). 5 Taking the reflexive closure ensures that the location of u is in the neighborhood. 6 Since it is given that u ∈ U , x is not satisfied if x refers to a vertex outside of H[U ] (i.e., g(x) ∈ U ).…”

“…There has been a growing body of literature on spatially aware access control models [19,5,33,42,27,10,11,16,34,2,6,21,1,30]. Building on these insights, this study of GSCSs aspires to further our understanding of spatiallyaware access control in two areas.…”

Attribute Delegation Based on Ontologies and Context Information

“…This easy schema can be used with other Type components, like location. Location can be encoded using IP addresses with and ontology encoding the subnetting relation or using geographical information [9,10] We encode the validity evaluation using RuleML [7] or SWRL [8] which is also supported by a Protege plugin. The definition of the last kind of validity evaluation in SWRL is trivial, as it only involves one subclass relation.…”

Access Control Systems for Geospatial Data and Applications

“…The first access control model for geographical data has been proposed [1] to control the access to georeferenced Earth images. The purpose of such an approach is the controlled dissemination of satellite images at different levels of resolution through a DAC policy.…”