Toggle Main Menu Toggle Search

ePrints

Access control and view generation for provenance graphs

Lookup NU author(s): Dr Paolo Missier, Dr Jeremy Bryans

Downloads

Full text for this publication is not currently held within this repository. Alternative links are provided below where available.


Abstract

Data provenance refers to the knowledge about data sources and operations carried Out to obtain some piece of data. A provenance-enabled system maintains record of the interoperation of processes across different modules, stages and authorities to capture the full lineage of the resulting data, and typically allows data-focused audits using semantic technologies, such as ontologies, that capture domain knowledge. However, regulating access to captured provenance data is a non-trivial problem, since execution records form complex, overlapping graphs with individual nodes possibly being subject to different access policies. Applying traditional access control to provenance queries can either hide from the user the entire graph with nodes that had access to them denied, reveal too much information, or return a semantically invalid graph. An alternative approach is to answer queries with a new graph that abstracts over the missing nodes and fragments. In this paper, we present TACLP, an access control language for provenance data that supports this approach, together with an algorithm that transforms graphs according to sets of access restrictions. The algorithm produces safe and valid provenance graphs that retain the maximum amount of information allowed by the security model. The approach is demonstrated on an example of restricting access to a clinical trial provenance trace. (C) 2015 Elsevier B.V. All rights reserved.


Publication metadata

Author(s): Danger R, Curcin V, Missier P, Bryans J

Publication type: Article

Publication status: Published

Journal: Future Generation Computer Systems

Year: 2015

Volume: 49

Pages: 8-27

Print publication date: 01/08/2015

Online publication date: 17/02/2015

Acceptance date: 22/01/2015

ISSN (print): 0167-739X

ISSN (electronic): 1872-7115

Publisher: Elsevier

URL: http://dx.doi.org/10.1016/j.future.2015.01.014

DOI: 10.1016/j.future.2015.01.014


Altmetrics

Altmetrics provided by Altmetric


Actions

    Link to this publication


Share