DatShA :A Data Sharing Algebra for access control plans

Luc Bouganim (1, 2) , Athanasia Katsouraki (1, 2) , Benjamin Nguyen (3, 2)

1 UVSQ - Université de Versailles Saint-Quentin-en-Yvelines
2 SMIS - Secured and Mobile Information Systems
3 LIFO - Laboratoire d'Informatique Fondamentale d'Orléans

Online social networks (OSN) are one of the most successful applications that have been created this last decade. Central to these applications is the problem of sharing data, such as texts, photos, geolocation, etc. In most cases, this data is private, and thus is only shared with “friends”, a loose concept. Some OSN, such as Google+ let you define circles in order to categorize your friends: friends, close friends, acquaintances, etc. Data can then be shared on finer grain using these circles. However, there is no automatic way to control the simultaneous sharing of data to several circles, with different data precision granularities, such as in the following scenario: Alice wants to share a set of photos with her family, photos with no metadata with her close friends, photos without faces (and without metadata) in a reduced definition with her acquaintances, and does not want to share anything with anyone else. In this article, we will show how the use of a data sharing algebra to write a variety of access control plans (ACP) can overcome these current limitations of OSN access control. Moreover, by using an algebra, it becomes simple to modify, compose, and share these ACPs. Thus less advanced users can easily reuse ACPs shared on a marketplace by more experienced users. A prototype of the DatShA system has been implemented using XQuery 3.0 and is briefly described.

Domaines: Base de données [cs.DB]

Luc Bouganim, Athanasia Katsouraki, Benjamin Nguyen. DatShA :A Data Sharing Algebra for access control plans. EDBT 2016 - 19th International Conference on Extending Database Technology, Mar 2016, Bordeaux, France. ⟨hal-01289023⟩