An Architecture for Implementing 'Collaborative Usage Control' Policy Toward End-to-End Security Management in Collaborative Computing

摘要

The cross boundary asset (service and information) sharing in collaborative context leads to the requirement of end-to-end protection during the full lifecycle of assets, including the sharing, merging and consuming stages. The development of 'collaborative usage control' model provides an approaches for answering this requirement, given that such model is able to express assets 'usage' activities and to maintain assets providers' policy effects on the artifact of their collaborative work. Therefore, its implementation requires more comprehensive functionalities than traditional access control systems. This paper proposes an architecture for collaborative usage control management, with components for policy negotiation, aggregation, and enforcement, as well as components for collaborative context management with security policies. We also present experimental results for the performances of several components.