SMARXO: towards secured multimedia applications by adopting RBAC, XML and object-relational database

ABSTRACT

In this paper, a framework named SMARXO is proposed to address the security issues in multimedia applications by adopting RBAC (Role-Based Access Control), XML, and Object-Relational Databases. Compared with the other existing security models or projects, SMARXO can deal with more intricate situations. First, the image object-level security and video scene/shot-level security can be easily achieved. Second, the temporal constrains and IP address restrictions are modeled for the access control purpose. Finally, XML queries can be performed such that the administrators can proficiently retrieve useful information from the security roles and policies.

REFERENCES

• 1: Elisa Bertino , Piero Andrea Bonatti , Elena Ferrari, TRBAC: A temporal role-based access control model, ACM Transactions on Information and System Security (TISSEC), v.4 n.3, p.191-233, August 2001 [doi>10.1145/501978.501979]
• 2: Joshi, J., Li, K., Fahmi, H., Shafiq, B. and Ghafoor, A. A Model for Secure Multimedia Document Database System in a Distributed Environment. IEEE Transaction on Multimedia, Vol. 4, No. 2, June 2002, 215--234.
• 3: James B. D. Joshi , Basit Shafiq , Arif Ghafoor , Elisa Bertino, Dependencies and separation of duty constraints in GTRBAC, Proceedings of the eighth ACM symposium on Access control models and technologies, June 02-03, 2003, Como, Italy [doi>10.1145/775412.775420]
• 4: Generalized Role-Based Access Control, Proceedings of the The 21st International Conference on Distributed Computing Systems, p.391, April 16-19, 2001
• 5: Ravi S. Sandhu , Edward J. Coyne , Hal L. Feinstein , Charles E. Youman, Role-Based Access Control Models, Computer, v.29 n.2, p.38-47, February 1996 [doi>10.1109/2.485845 ]
• 6: Extensible Markup Language (XML) 1.0 (Second Edition) - W3C Recommendation 6 October 2000. http://www.w3.org/TR/2000/REC-xml-20001006.pdf

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.0 General
          Subjects: Security, integrity, and protection**

General Terms:
Management, Security

Keywords:
XML, multimedia security, object-relational databases, role-based access control (RBAC)