Abstract
Often, enforcing security incurs overhead, and as a result may degrade the performance of a system. In this paper, we attempt to address this problem in the context of enforcing access control policies in a mobile data object environment. There are a number of applications that call for fine-grained specification of security policies in guaranteeing the confidentiality of data or privacy of individuals in a mobile environment. In particular, the security policies state the rules for providing controlled access to the mobile user profiles, to their current location and movement trajectories, to mobile resources, and stationary resources based on the mobile user location. Either a subject or an object in an authorization specification can be a moving object. The access requests in such an environment can typically be based on past, present and future status of the moving objects. To effectively serve such access requests, one must efficiently organize the mobile objects as well as authorizations.
Although implementation of authorizations as access control list, capability list or access matrix is suitable for traditional data, it is not suitable to search mobile object authorizations as they are based on spatial and temporal attributes of subjects and objects, rather than subject and object identifiers. When a subject issues an access request, the system must first retrieve the relevant objects from the moving object database, and then verify whether there exists an authorization that allows the subject to access these objects. Since both the moving objects and authorizations are spatiotemporal in nature, for efficient processing of access requests, it is essential that they both be organized using some index structures. As a result, processing an access request requires searching two indexes – one, the moving object index, and the other, the authorization index. To improve the response time of access requests, in this paper, we propose a unified index structure, called STPR-tree to index both moving objects and authorizations that govern access to them. As a result of the unified index, access requests can be processed in one pass, thereby improving the response time. Note that current access control systems do not use any index for authorizations; our work is a step in this direction. We show how the STPR-tree can be constructed and maintained, and provide algorithms to process access requests.
This work is supported in part by the National Science Foundation under grant IIS-0242415.
Chapter PDF
Similar content being viewed by others
Keywords
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
References
Aalto, L., Gthlin, N., Korhonen, J., Ojala, T.: Bluetooth and wap push based location-aware mobile advertising system. In: Proceedings of the international conference on Mobile systems, applications, and services, pp. 49–58 (2004)
Ackerman, L., Kempf, J., Miki, T.: Wireless location privacy: A report on law and policy in the United States, the Europrean Union, and Japan. DoCoMo USA Labs Technical Report DCL-TR2003-001 (2003)
Agarwal, P., Arge, L., Erickson, J.: Indexing moving points. In: Proceedings of the ACM Symposium on Principles of Database Systems, pp. 175–186 (2000)
Arge, L., Samoladas, V., Vitter, J.: On two-dimensional indexability and optimal range search indexing. In: Proceedings of the ACM Symposium on Principles of Database Systems, pp. 346–357 (1999)
Atluri, V., Adam, N., Youssef, M.: Towards a unified index scheme for mobile data and customer profiles in a location-based service environment. In: Workshop on Next Generation Geospatial Information, NG2I 2003 (2003)
Atluri, V., Chun, S.: An authorization model for geospatial data. IEEE Trans. Dependable Sec. Comput. 1(4), 238–254 (2004)
Atluri, V., Guo, Q.: STAR-Tree: An index structure for efficient evaluation of spatiotemporal authorizations. In: IFIP TC11/WG 11.3 Eighteenth Annual Conference on Data and Applications Security, pp. 31–47 (2004)
Atluri, V., Mazzoleni, P.: Uniform indexing for geospatial data and authorizations. In: DBSec, pp. 207–218 (2002)
Basch, J., Guibas, L., Silverstein, C., Zhang, L.: A practical evaluation of kinetic data structures. In: Proceedings of the annual symposium on Computational geometry, pp. 388–390 (1997)
Beckmann, N., Kriegel, H., Schneider, R., Seeger, B.: The R*-Tree: an efficient and robust access method for points and rectangles. In: SIGMOD Conference, pp. 322–331 (1990)
Beresford, A., Stajano, F.: Mix zones: User privacy in location-aware services. In: PerCom Workshops, pp. 127–131 (2004)
Kollios, G., Gunopulos, D., Tsotras, V.: On indexing mobile objects. In: Proceedings of the ACM Symposium on Principles of Database Systems, pp. 261–272 (1999)
Moreira, J., Ribeiro, C., Abdessalem, T.: Query operations for moving objects database systems. In: Proceedings of the eighth ACM international symposium on Advances in geographic information systems, pp. 108–114. ACM Press, New York (2000)
Papadopoulos, D., Kollios, G., Gunopulos, D., Tsotras, V.: Indexing mobile objects on the plane. In: DEXA Workshops, pp. 693–697 (2002)
Papadopoulos, D., Kollios, G., Gunopulos, D., Tsotras, V.: Indexing mobile objects using duality transforms. IEEE Data Eng. Bull. 25(2), 18–24 (2002)
Pelanis, M., Saltenis, S., Jensen, C.: Indexing the past, present and anticipated future positions of moving objects. A TIMECENTER Technical Report TR-78 (2004)
Pfoser, D.: Indexing the trajectories of moving objects. IEEE Data Eng. Bull. 25(2), 3–9 (2002)
Pfoser, D., Jensen, C., Theodoridis, Y.: Novel approaches in query processing for moving object trajectories. In: Proceedings of 26th International Conference on Very Large Data Bases, pp. 395–406 (2000)
Rao, A., Papadimitriou, C., Shenker, S., Stoica, I.: Geographic routing without location information. In: MOBICOM, pp. 96–108 (2003)
Saltenis, S., Jensen, C., Leutenegger, S., Lopez, M.: Indexing the positions of continuously moving objects. In: Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data, vol. 29, pp. 331–342 (2000)
Samet, H., Tamminen, M.: Approximating csg trees of moving objects. The Visual Computer 6(4), 182–209 (1990)
Scott, D., Beresford, A., Mycroft, A.: Spatial security policies for mobile agents in a sentient computing environment. In: FASE, pp. 102–117 (2003)
Sistla, P., Wolfson, O., Chamberlain, S., Dao, S.: Modeling and querying moving objects. In: Proceedings of the Thirteenth International Conference on Data Engineering, Birmingham U.K., April 7-11, 1997, pp. 422–432 (1997)
Tayeb, J., Ulusoy, O., Wolfson, O.: A Quadtree-Based Dynamic Attribute Indexing Method. The Computer Journal 41(3), 185–200 (1988)
Venkatesh, V., Ramesh, V., Massey, A.: Understanding usability in mobile commerce. Commun. ACM 46(12), 53–56 (2003)
Wolfson, O., Xu, B., Chamberlain, S., Jiang, L.: Moving objects databases: Issues and solutions. In: 10th International Conference on Scientific and Statistical Database Management, Proceedings, Capri, Italy, July 1-3, 1998, pp. 111–122 (1998)
Youssef, M., Adam, N., Atluri, V.: Preserving Mobile Customer Privacy: An Access Control System for Moving Objects and Customer Information. In: Chen, M.-S., Chrysanthis, P.K., Sloman, M., Zaslavsky, A. (eds.) MDM 2003. LNCS, vol. 2574, Springer, Heidelberg (2005)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Atluri, V., Guo, Q. (2005). Unified Index for Mobile Object Data and Authorizations. In: di Vimercati, S.d.C., Syverson, P., Gollmann, D. (eds) Computer Security – ESORICS 2005. ESORICS 2005. Lecture Notes in Computer Science, vol 3679. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11555827_6
Download citation
DOI: https://doi.org/10.1007/11555827_6
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-28963-0
Online ISBN: 978-3-540-31981-8
eBook Packages: Computer ScienceComputer Science (R0)