Secure Group Communication Based Scheme for Differential Access Control in Dynamic Environments

摘要

Applications like e-newspaper or interactive online gaming typically have more than one resource and a large number of users. There is a many-to-many relationship between users and resources, each user can access multiple resources and each resource can be accessed by multiple users. Each resource needs to be encrypted by a different resource encryption key (REK). Each REK needs to be distributed to all subscribers of the resource and each subscriber must get all the REKs he/she subscribes to. We term this as problem of differential access control. Also this environment is very dynamic in terms of subscription changes by users and resource changes by service providers. Conventional ways of access control are not sufficient for this problem of differential access control. In this paper, we propose a new scheme of access control, based on secure group communication framework that is efficient, scalable, practical and dynamic