Privacy-preserving semantic interoperation and access control of heterogeneous databases

Prasenjit Mitra, Chi Chun Pan, Peng Liu, Vijayalakshmi Atluri

Research output: Chapter in Book/Report/Conference proceedingConference contribution

25 Citations (Scopus)

Abstract

Today, many applications require users from one organization to access data belonging to organizations. While traditional solutions offered for the federated and mediated databases facilitate this by sharing metadata, this may not be acceptable for certain organizations due to privacy concerns. In this paper, we propose a novel solution - Privacy-preserving Access Control Toolkit (PACT) - that enables privacy-preserving secure semantic access control and allows sharing of data among heterogeneous databases without having to share metadata. PACT uses encrypted ontologies, encrypted ontology-mapping tables and conversion functions, encrypted role hierarchies and encrypted queries. The encrypted results of queries are sent directly from the responding system to the requesting system, bypassing the mediator to further improve the security of the system. PACT provides semantic access control using ontologies and semantically expanded authorization tables at the mediator. One of the distinguishing features of the PACT is that it requires very little changes to underlying databases. Despite using encrypted queries and encrypted mediation, we demonstrate that PACT provides acceptable performance.

Original languageEnglish (US)
Title of host publicationProceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06
Pages66-77
Number of pages12
DOIs
StatePublished - Dec 1 2006
Event2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06 - Taipei, Taiwan, Province of China
Duration: Mar 21 2007Mar 24 2007

Publication series

NameProceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06
Volume2006

Other

Other2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06
CountryTaiwan, Province of China
CityTaipei
Period3/21/073/24/07

Fingerprint

Access control
Semantics
Ontology
Metadata

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Networks and Communications

Cite this

Mitra, P., Pan, C. C., Liu, P., & Atluri, V. (2006). Privacy-preserving semantic interoperation and access control of heterogeneous databases. In Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06 (pp. 66-77). (Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06; Vol. 2006). https://doi.org/10.1145/1128817.1128831
Mitra, Prasenjit ; Pan, Chi Chun ; Liu, Peng ; Atluri, Vijayalakshmi. / Privacy-preserving semantic interoperation and access control of heterogeneous databases. Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06. 2006. pp. 66-77 (Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06).
@inproceedings{6f241c3c9be247edb67343f20924b29f,
title = "Privacy-preserving semantic interoperation and access control of heterogeneous databases",
abstract = "Today, many applications require users from one organization to access data belonging to organizations. While traditional solutions offered for the federated and mediated databases facilitate this by sharing metadata, this may not be acceptable for certain organizations due to privacy concerns. In this paper, we propose a novel solution - Privacy-preserving Access Control Toolkit (PACT) - that enables privacy-preserving secure semantic access control and allows sharing of data among heterogeneous databases without having to share metadata. PACT uses encrypted ontologies, encrypted ontology-mapping tables and conversion functions, encrypted role hierarchies and encrypted queries. The encrypted results of queries are sent directly from the responding system to the requesting system, bypassing the mediator to further improve the security of the system. PACT provides semantic access control using ontologies and semantically expanded authorization tables at the mediator. One of the distinguishing features of the PACT is that it requires very little changes to underlying databases. Despite using encrypted queries and encrypted mediation, we demonstrate that PACT provides acceptable performance.",
author = "Prasenjit Mitra and Pan, {Chi Chun} and Peng Liu and Vijayalakshmi Atluri",
year = "2006",
month = "12",
day = "1",
doi = "10.1145/1128817.1128831",
language = "English (US)",
isbn = "1595932720",
series = "Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06",
pages = "66--77",
booktitle = "Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06",

}

Mitra, P, Pan, CC, Liu, P & Atluri, V 2006, Privacy-preserving semantic interoperation and access control of heterogeneous databases. in Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06. Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06, vol. 2006, pp. 66-77, 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06, Taipei, Taiwan, Province of China, 3/21/07. https://doi.org/10.1145/1128817.1128831

Privacy-preserving semantic interoperation and access control of heterogeneous databases. / Mitra, Prasenjit; Pan, Chi Chun; Liu, Peng; Atluri, Vijayalakshmi.

Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06. 2006. p. 66-77 (Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06; Vol. 2006).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Privacy-preserving semantic interoperation and access control of heterogeneous databases

AU - Mitra, Prasenjit

AU - Pan, Chi Chun

AU - Liu, Peng

AU - Atluri, Vijayalakshmi

PY - 2006/12/1

Y1 - 2006/12/1

N2 - Today, many applications require users from one organization to access data belonging to organizations. While traditional solutions offered for the federated and mediated databases facilitate this by sharing metadata, this may not be acceptable for certain organizations due to privacy concerns. In this paper, we propose a novel solution - Privacy-preserving Access Control Toolkit (PACT) - that enables privacy-preserving secure semantic access control and allows sharing of data among heterogeneous databases without having to share metadata. PACT uses encrypted ontologies, encrypted ontology-mapping tables and conversion functions, encrypted role hierarchies and encrypted queries. The encrypted results of queries are sent directly from the responding system to the requesting system, bypassing the mediator to further improve the security of the system. PACT provides semantic access control using ontologies and semantically expanded authorization tables at the mediator. One of the distinguishing features of the PACT is that it requires very little changes to underlying databases. Despite using encrypted queries and encrypted mediation, we demonstrate that PACT provides acceptable performance.

AB - Today, many applications require users from one organization to access data belonging to organizations. While traditional solutions offered for the federated and mediated databases facilitate this by sharing metadata, this may not be acceptable for certain organizations due to privacy concerns. In this paper, we propose a novel solution - Privacy-preserving Access Control Toolkit (PACT) - that enables privacy-preserving secure semantic access control and allows sharing of data among heterogeneous databases without having to share metadata. PACT uses encrypted ontologies, encrypted ontology-mapping tables and conversion functions, encrypted role hierarchies and encrypted queries. The encrypted results of queries are sent directly from the responding system to the requesting system, bypassing the mediator to further improve the security of the system. PACT provides semantic access control using ontologies and semantically expanded authorization tables at the mediator. One of the distinguishing features of the PACT is that it requires very little changes to underlying databases. Despite using encrypted queries and encrypted mediation, we demonstrate that PACT provides acceptable performance.

UR - http://www.scopus.com/inward/record.url?scp=34247379108&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=34247379108&partnerID=8YFLogxK

U2 - 10.1145/1128817.1128831

DO - 10.1145/1128817.1128831

M3 - Conference contribution

AN - SCOPUS:34247379108

SN - 1595932720

SN - 9781595932723

T3 - Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06

SP - 66

EP - 77

BT - Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06

ER -

Mitra P, Pan CC, Liu P, Atluri V. Privacy-preserving semantic interoperation and access control of heterogeneous databases. In Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06. 2006. p. 66-77. (Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06). https://doi.org/10.1145/1128817.1128831