Protecting access to digital resources is one of the fundamental problems recognized in
computer security. As yet it remains a challenging problem to work out, starting from the …

Purpose Authorization and access control have been a topic of research for several
decades. However, existing definitions are inconsistent and even contradicting each other …

In this article, we introduce a comprehensive framework supporting a privacy-aware access
control mechanism, that is, a mechanism tailored to enforce access control to data …

The central goal of secure information sharing is to" share but protect" where the motivation
to" protect" is to safeguard the sensitive content from unauthorized disclosure (in contrast to …

In this paper, we introduce the internet of things and related architecture and protocols, and
the family of usage control (UCON) models, which integrate authorizations (A), obligations …

In this paper we introduce a new framework for controlling compliance to discretionary
access control policies [Cederquist et al. in Proceedings of the International Workshop on …

Provenance access control has been recognized as one of the most important components
in an enterprise-level provenance system. However, it has only received little attention in the …

While preventative policy enforcement mechanisms can provide theoretical guarantees that
policy is correctly enforced, they have limitations in practice. They are inflexible when …

Data usage control enables data owners to enforce policies over how their data may be
used after they have been released and accessed. We address distributed aspects of this …

Group-Centric Secure Information Sharing (g-SIS) envisions bringing users and objects
together in a group to facilitate agile sharing of information brought in from external sources …