The Community for Technology Leaders
Computer Security Applications Conference, Annual (2006)
Miami Beach, Florida, USA
Dec. 11, 2006 to Dec. 15, 2006
ISSN: 1063-9527
ISBN: 0-7695-2716-7
pp: 403-413
Omid Fatemieh , University of Illinois Urbana-Champaign, USA
Fariba Khan , University of Illinois Urbana-Champaign, USA
Himanshu Khurana , University of Illinois Urbana-Champaign, USA
Carl A. Gunter , University of Illinois Urbana-Champaign, USA
Rakesh Bobba , University of Illinios Urbana-Champaign, USA
Attribute Based Messaging (ABM) enables message senders to dynamically create a list of recipients based on their attributes as inferred from an enterprise database. Such targeted messaging can reduce unnecessary communications and enhance privacy, but faces challenges in access control. In this paper we explore an approach to ABM based on deriving access control information from the same attribute database exploited by the addressing scheme. We show how to address three key challenges. First, we demonstrate a manageable access control system based on attributes. Second we show how this can be used with existing messaging systems to provide a practical deployment strategy. Third, we show that such a system can be efficient enough to support ABM for mid-size enterprises. Our implementation can dispatch ABM messages approved by XACML review for an enterprise of at least 60,000 users with only seconds of latency.
Omid Fatemieh, Fariba Khan, Himanshu Khurana, Carl A. Gunter, Rakesh Bobba, "Using Attribute-Based Access Control to Enable Attribute-Based Messaging", Computer Security Applications Conference, Annual, vol. 00, no. , pp. 403-413, 2006, doi:10.1109/ACSAC.2006.53
857 ms
(Ver 3.3 (11022016))