Usage Control Enforcement - A Survey

Abstract

Sharing information allows businesses to take advantage of hidden knowledge, improve work processes and cooperation both within and across organisations. Thus there is a need for improved information protection capable of restricting how information is used, as opposed to only accessed. Usage Control has been proposed to achieve this by combining and extending traditional access control, Digital Rights Management and various encryption schemes. Advances in usage control enforcement has received considerable attention from the research community and we therefore believe there is a need to synthesise these efforts to minimise the potential for overlap. This paper surveys the previous efforts on providing usage control enforcement and analyses the general strengths and weaknesses of these approaches. In this paper we demonstrate that there are several promising mechanisms for enforcing usage control, but that reliable empirical evidence is required in order to ensure the appropriateness and usability of the enforcement mechanisms.

Enforcement of CA-UCON Model

“…It then lets the subject access the service if the reply from decision point component is PERMIT; otherwise, it denies access to the subject. This behaviour is typical to many access control models [7][8][9].…”

Usage Control in Inter-organisational Collaborative Environments – A Case Study from an Industry Perspective

“…How can the aspects described above be enforced for distributed information? While there are several proposed enforcement models [2] , we focus on the two main strategies of enforcement: proactive and reactive enforcement [2]. That is, whether enforcement should attempt to prevent misuse of information or merely detect it.…”

“…Since the initial proposition from Park and Sandhu [1], several usage control models have been proposed, with different strategies of enforcement. Some of the models have even been implemented as prototypes and tested for computational overhead [2]. From a researcher's perspective, it seems obvious that usage control would help those that share potentially sensitive information with others.…”

Frontier and Methodologies on Digital Rights Management for Multimedia Social Networks

“…Therefore, sharing and spreading digital rights should be our main concern. Existing digital content/rights sharing has been restricted within the general authorized domain, such as digital family domain [8], [9] or personal entertainment domain, which binds distributive digital licensing and content to equipment and (or) user through redistribution and strict usage control security policy [10], [11]. This practice is to ensure that digital content is legal and authorized within the general authorized domain.…”