Selective Exchange of Confidential Data in the Outsourcing Scenario

The evolution of information and communication technologies (ICTs) has introduced new ways for sharing and disseminating user-generated content through remote storage, publishing, and disseminating services. From an enterprise oriented point of view, these services offer cost effective and reliable data storage features that any organisation can take advantage of without long setup delays and capital expenses. Also, from an end-user point of view, distributed and shared data storage services offer considerable advantages in terms of reliability and constant availability of data. While on one hand data sharing services encourage and enhance the collaboration among users, on the other hand they need to provide proper protection of data, possibly enforcing access restrictions defined by the data owner. In this chapter, we present an approach for allowing users to delegate to an external service the enforcement of the access control policy on their resources, while at the same time not requiring complete trust in the external service. Our solution relies on the translation of the access control policy into an equivalent encryption policy on resources, and on a hierarchical key structure that exploits the relationships between groups or users. In this way, we limit both the number of keys to be maintained and the amount of encryption to be performed, while keeping a good flexibility with respect to policy updates and revocations.

Authors and Affiliations

1. Università degli Studi di Milano, Dip. di Tecnologie dell’Informazione, Via Bramante 65, Crema, I-26013, Italy

   Sabrina De Capitani di Vimercati, Sara Foresti & Pierangela Samarati

2. Università degli Studi di Bergamo, DIIMM, Viale Marconi 25, Dalmine, I-24044, Italy

   Stefano Paraboschi & Gerardo Pelosi

Editors and Affiliations

1. Säumerstr. 4, Zurich, 8803, Switzerland

   Jan Camenisch

2. Universitetsgatan 2, Karlstad, 651 88, Sweden

   Simone Fischer-Hübner

3. , Mobile Business & Multilateral Security, Goethe University Frankfurt, Grueneburgplatz 1, Frankfurt, 60629, Germany

   Kai Rannenberg

Reprints and permissions

© 2011 Springer-Verlag Berlin Heidelberg

Policies and ethics