Enforcing Secure and Privacy-Preserving Information Brokering in Distributed Information Sharing
Today’s organizations raise an increasing need for information sharing via on-demand access. Information brokering systems (IBSs) have been proposed to connect large-scale loosely federated data sources via a brokering overlay, in which the brokers make routing decisions to direct client queries to the requested data servers. Many existing IBSs assume that brokers are trusted and thus only adopt server-side access control for data confidentiality. However, privacy of data location and data consumer can still be inferred from metadata (such as query and access control rules) exchanged within the IBS, but little attention has been put on its protection. In this paper, we propose a novel approach to preserve privacy of multiple stakeholders involved in the information brokering process. We are among the first to formally define two privacy attacks, namely attribute-correlation attack and inference attack, and propose two countermeasure schemes automaton segmentation and query segment encryption to securely share the routing decision-making responsibility among a selected set of brokering servers. With comprehensive security analysis and experimental results, we show that our approach seamlessly integrates security enforcement with query routing to provide system-wide security with insignificant overhead.
Access control, information sharing, privacy
Computer Sciences | Finance and Financial Management | Management Information Systems
Information Systems and Management
IEEE Transactions on Information Forensics and Security
LI, Fengjun; LUO, Bo; LIU, Peng; LEE, Dongwon; and CHU, Chao-Hsien.
Enforcing Secure and Privacy-Preserving Information Brokering in Distributed Information Sharing. (2013). IEEE Transactions on Information Forensics and Security. 8, (6), 888-900. Research Collection School Of Information Systems.
Available at: http://ink.library.smu.edu.sg/sis_research/2239
Creative Commons License
This work is licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 4.0 License.