Title:
Scalable Access Control in Content-Based Publish-Subscribe Systems
Scalable Access Control in Content-Based Publish-Subscribe Systems
| dc.contributor.author | Srivatsa, Mudhakar | |
| dc.contributor.author | Liu, Ling | |
| dc.date.accessioned | 2007-01-25T21:05:03Z | |
| dc.date.available | 2007-01-25T21:05:03Z | |
| dc.date.issued | 2006 | |
| dc.description.abstract | Content-based publish-subscribe (pub-sub) systems are an emerging paradigm for building a large number of distributed systems. Access control in a pub-sub system refers to secure distribution of events to clients subscribing to those events without revealing its secret attributes to the unauthorized subscribers. To provide confidentiality guarantees the secret attributes in an event is encrypted so that only authorized subscribers can read them. However, in a content-based pub-sub system, every event can potentially have a different set of authorized subscribers. In the worst case, for NS subscribers, there are 2^NS subgroups, and each event can potentially go to a different subgroup. Hence, efficient key management is a big challenge for implementing access control in pub-sub systems. In this paper, we describe efficient and scalable key management algorithms for securely implementing access control rules in pub-sub systems. We ensure that the key management cost is linear in the number of subscriptions and completely independent of the number of subscribers NS. We present a concrete implementation of our proposal on an operational pub-sub system. An experimental evaluation of our prototype shows that our proposal meets the security requirements while maintaining the scalability and performance of the pub-sub system. | en |
| dc.format.extent | 305548 bytes | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.uri | http://hdl.handle.net/1853/13181 | |
| dc.language.iso | en_US | en |
| dc.publisher | Georgia Institute of Technology | en |
| dc.relation.ispartofseries | CERCS;GIT-CERCS-06-05 | en |
| dc.subject | Publish-subscribe systems | en |
| dc.subject | Access control | en |
| dc.subject | Key management | en |
| dc.subject | Performance | en |
| dc.subject | Scalability | en |
| dc.title | Scalable Access Control in Content-Based Publish-Subscribe Systems | en |
| dc.type | Text | |
| dc.type.genre | Technical Report | |
| dspace.entity.type | Publication | |
| local.contributor.author | Liu, Ling | |
| local.contributor.corporatename | Center for Experimental Research in Computer Systems | |
| local.relation.ispartofseries | CERCS Technical Report Series | |
| relation.isAuthorOfPublication | 96391b98-ac42-4e2c-93ee-79a5e16c2dfb | |
| relation.isOrgUnitOfPublication | 1dd858c0-be27-47fd-873d-208407cf0794 | |
| relation.isSeriesOfPublication | bc21f6b3-4b86-4b92-8b66-d65d59e12c54 |