Secure mediation requirements, design, and architecture 安全中介：需求、设计和体系结构.pdfVIP

Journal of Computer Security 11 (2003) 365–398 365 IOS Press Secure mediation: requirements, design, and architecture C. Altenschmidt, J. Biskup, U. Flegel and Y. Karabulut ∗ Universität Dortmund, Informatik VI, D-44221 Dortmund, Germany Tel.: +49 231 7552641; Fax: +49 231 7552405; E-mail: {altensch,biskup,flegel,karabulu}@ls6.cs.uni-dortmund.de In mediated information systems clients and various autonomous sources are brought together by me- diators. The mediation paradigm needs powerful and expressive security mechanisms considering the dy- namics and conflicting interests of the mediation participants. Firstly, we discuss the security requirements for mediation with an emphasis on confidentiality and authenticity. We argue for basing the enforcement of these properties on certified personal authorization attributes rather than on identification. Using a pub- lic key infrastructure such personal authorization attributes can be bound to asymmetric encryption keys by credentials. Secondly, we propose a general design of secure mediation where credentials are roughly used as follows: clients show their eligibility for receiving requested information by the contained per- sonal authorization attributes, and sources and the mediator guarantee confidentiality by using the con- tained encryption keys. Thirdly, we refine the general design for a specific approach to mediation, given by our prototype of a Multimedia Mediator, MMM. Among other contributions, we define the authoriza- tion model and the specification of query access authorizations within the framework of ODL, as well as the authorization and encryption policies for mediation, and we outline the resulting security architecture of the MMM. We also analyze the achievable security properties including support for anonymity, and we discuss the inevitable tradeoffs between security and mediation functionality. 1. Introduction Recen