Dynamic Access Control in a Content-based Publish/Subscribe System with Delivery Guarantees (search Google Scholar)

Y. Zhao and D. C. Sturman. Dynamic access control in a content-based publish/subscribe system with delivery guarantees. In H. Ichikawa and M. Raynal, editors, Proceedings of the 26th IEEE International Conference on Distributed Computing Systems (ICDCS 2006), pages 60‒60, Lisbon, Portugal, July 2006. IEEE, IEEE.

Abstract

Content-based publish/subscribe (pub/sub) is a promising paradigm for building asynchronous distributed applications. In many application scenarios, these systems are required to provide stringent service guarantees such as reliable delivery, high performance, high availability and dynamic system security. In this paper, we address the issue of dynamic access control in a content-based system that provides reliable delivery and high availability through redundant routes. We define a deterministic service model of dynamic access controls that enables precise control over event confidentiality. Under this model, the semantics of reliable delivery is clearly defined, that is, the messages delivered in response to the same subscriptions from pub/sub clients running on behalf of the same principal will be exactly the same, regardless of their connecting locations, network latency and failures. We present an algorithm that implements this service model. The algorithm is efficient and highly available in that it enables uniform enforcement of access control and enables content-based routing to choose any path from among several redundant routes without requiring consensus among the brokers.

BibTeX

@InProceedings{ZhaoSturman:2006:DynAccessControl, author = "Yuanyuan Zhao and Daniel C. Sturman", title = "Dynamic Access Control in a Content-based Publish/Subscribe System with Delivery Guarantees", topic = "Security;Quality of Service", abstract = "Content-based publish/subscribe (pub/sub) is a promising paradigm for building asynchronous distributed applications. In many application scenarios, these systems are required to provide stringent service guarantees such as reliable delivery, high performance, high availability and dynamic system security. In this paper, we address the issue of dynamic access control in a content-based system that provides reliable delivery and high availability through redundant routes. We define a deterministic service model of dynamic access controls that enables precise control over event confidentiality. Under this model, the semantics of reliable delivery is clearly defined, that is, the messages delivered in response to the same subscriptions from pub/sub clients running on behalf of the same principal will be exactly the same, regardless of their connecting locations, network latency and failures. We present an algorithm that implements this service model. The algorithm is efficient and highly available in that it enables uniform enforcement of access control and enables content-based routing to choose any path from among several redundant routes without requiring consensus among the brokers.", pages = "60--60", doi = "10.1109/ICDCS.2006.32", crossref = "ICDCS2006", modified = "1152188008", }

In: 26th IEEE International Conference on Distributed Computing Systems (ICDCS 2006) (search Google Scholar)

H. Ichikawa and M. Raynal, editors. 26th IEEE International Conference on Distributed Computing Systems (ICDCS 2006), Lisbon, Portugal, July 2006. IEEE, IEEE.

URL

BibTeX

@Proceedings{ICDCS2006, title = "26th {IEEE} International Conference on Distributed Computing Systems ({ICDCS} 2006)", booktitle = "Proceedings of the 26th {IEEE} International Conference on Distributed Computing Systems ({ICDCS} year = "2006", month = jul, editor = "Haruhisa Ichikawa and Michel Raynal", address = "Lisbon, Portugal", organization = "IEEE", publisher = "IEEE", ISSN = "1063-6927", topic = "Proceedings", URL = "http://icdcs2006.di.fc.ul.pt/", modified = "1152188009", }