A conceptual framework for Group-Centric secure information sharing

In this paper, we propose a conceptual framework for developing a family of models for Group-Centric information sharing. The traditional approach to information sharing, characterized as Dissemination-Centric in this paper, focuses on attaching attributes and policies to an object (sometimes called "sticky policies") as it is disseminated from producers to consumers in a system. In contrast, Group-Centric sharing envisions bringing the subjects and objects together in a group to facilitate sharing. The metaphor is that of a secure meeting room where participants and information come together to "share" information for some common purpose. Another metaphor is that of the subscription model where, depending on policy, joining users may or may not be authorized to access past content. We argue that in such contexts, and in accordance with different application use cases, authorizations are influenced by the temporal ordering of subject and object group membership and...

• Type: Conference
• Year: 2009
• Where: CCS
• Authors: Ram Krishnan, Ravi S. Sandhu, Jianwei Niu, William H. Winsborough
• Keywords: CCS 2009, Group-Centric Information Sharing, Group-Centric Sharing Envisions, Object Group Membership, Security Privacy