Design of a Confidentiality and Access Control Solution for Content-Based Publish/Subscribe Systems

Abstract:

Content-based publish/subscribe (pub/sub) is a promising paradigm for building asynchronous distributed applications. As the number of participants in the network increases, an important issue we need to consider is the privacy of the data transmitted over the pub/sub network. When such sensitive information is being sent, it should be possible to control how the data is disclosed and to whom. In this paper, we address the issue of encrypted access control in a publish/subscribe system that provides content-based routing through advertisement messages. We show that our approach can effectively improve the system's safety performance without full trust network support.

• Periodical: Applied Mechanics and Materials (Volumes 385-386)
• Pages: 1883-1886
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.385-386.1883
• Online since: August 2013
• Authors: Chen Wang, Yuan An Liu, Jin Chun Gao, Xiao Lei Ma
• Keywords: Access Control (AC), Advertisement Messages, Content-Based, Publish/Subscribe

References

[1] C. Wang, A. Carzaniga, D. Evans, and A. Wolf. Security issues and requirements in internet-scale publish-subscribe systems. In Proceedings of the 35th Annual Hawaii International Conference on System Sciences (HICSS'02), page 303. IEEE, (2002).

DOI: 10.1109/hicss.2002.994531

[2] Zoltan Miklos. Towards an access control mechanism for wide-area publish/subscribe systems. In 1st International Workshop on Distributed Event-Based Systems (DEBS'02), ICDCS, pages 516–524. IEEE, July (2002).

DOI: 10.1109/icdcsw.2002.1030820

[3] M Ion, G Russello, B Crispo. Design and implementation of a confidentiality and access control solution for publish/subscribe systems. Computer Networks, vol. 56, no. 7, pages 2014-2037, May 3, (2012).

DOI: 10.1016/j.comnet.2012.02.013

[4] J Bacon, DM Eyers, J Singh, PR Pietzuch. Access Control in Publish/Subscribe Systems. Proceedings of the 2nd International Conference on Distributed Event-Based Systems, pages 23-24, (2008).

DOI: 10.1145/1385989.1385993

[5] A. Shikfa, M. Onen, R. Molva. Privacy-preserving content-based publish/subscribe networks, In Proceedings of Emerging Challenges for Security, Privacy and Trust, p.270, (2009).

DOI: 10.1007/978-3-642-01244-0_24

[6] Lauri I. W. Pesonen, David M. Eyers, and Jean Bacon. Encryption-Enforced Access Control in Dynamic Multi-Domain Publish/Subscribe Networks. In Proceedings of the International Conference on Distributed Event-Based Systems (DEBS'07), pages 104–115, ACM Press, June (2007).

DOI: 10.1145/1266894.1266916