Search

We present a novel approach for the specification and enforcement of authorizations that enables controlled data sharing for collaborative queries in the cloud. Data authorities can establish authorizations regulating access to their data distinguishing three visibility levels (no visibility, encrypted visibility, and plaintext visibility). Authorizations are enforced accounting for the information content carried in the computation to ensure no information is improperly leaked and adjusting visibility of data on-the-fly. Assignment of operations to subjects takes into consideration the cost of operation execution as well as of the encryption/decryption operations needed to make the assignment authorized. Our approach enables users and data authorities to fully enjoy the benefits and economic savings of the competitive open cloud market, while maintaining control over data. [ABSTRACT FROM AUTHOR]

Owing to the price increases in article distributing and scientific publication, the academics have been demanding for “Open Access” resources in recent years. However, whether academic publications belong to public property or not remains undetermined. This article that begins with the discussion of the attributes of thesis & dissertation in terms of public information was to explore the Open Access policy impact of all the stakeholders who have involved in the scholarly database marketplace. Eleven university libraries in Taiwan and two main commercial and non-commercial university degree paper database providers including one national legal depository were interviewed. This study also aimed to demonstrate a virtual cooperation of industrygovernment-university under the rapid and various development of academic service and high international competition environment. Concerning the right interpretation about electronic thesis authorization, legal deposit policy and its management related issues, the finding showed that many university libraries were charged with managing the thesis deposit within their duties but lack of regulation consistency and sensitivity of academic ethic. We believed that it is a fundamental long-term solution for a virtuous cycle of industrial survival and academic development. University libraries’ thoughtful consideration for authorization policy and the government’s good timing for choosing OA, both will be of great importance to the success of the thesis deposit policy.

Featured Application: Museums not only achieve the goal of promoting social education, but also solve their financial problems. In addition to the exhibition, collection, research, and educational functions of the museum, the development of a future museum includes the trend of leisure and sightseeing. Although the museum is a non-profit organization, if it can provide digital exhibits and collections under the premises of "intellectual property rights" and "cultural assets protection", and licensing and adding value in various fields, it can generate revenue from digital licensing and handle the expenses of museum operations. This will be a new trend in the sustainable development of museum operations. Especially since the outbreak of COVID-19 at the beginning of this year (2020), the American Alliance of Museums (AAM) recently stated that nearly a third of the museums in the United States may be permanently closed since museum operations are facing "extreme financial difficulties." This research is aimed at museums using the business model of "digital authorization". It proposes an authorization mechanism based on blockchain technology protecting the museums' digital rights in the business model and the application of cryptography. The signature and time stamp mechanism achieve non-repudiation and timeless mechanism, which combines blockchain and smart contracts to achieve verifiability, un-forgery, decentralization, and traceability, as well as the non-repudiation of the issue of cash flow with signatures and digital certificates, for the digital rights of museums in business. The business model proposes achievable sustainable development. Museums not only achieve the goal of promoting social education, but also solve their financial problems. [ABSTRACT FROM AUTHOR]

Copyright of Journal of Educational Media & Library Sciences is the property of Journal of Educational Media & Library Sciences, Department of Information & Library Science and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

In addition to the exhibition, collection, research, and educational functions of the museum, the development of a future museum includes the trend of leisure and sightseeing. Although the museum is a non-profit organization, if it can provide digital exhibits and collections under the premises of “intellectual property rights” and “cultural assets protection”, and licensing and adding value in various fields, it can generate revenue from digital licensing and handle the expenses of museum operations. This will be a new trend in the sustainable development of museum operations. Especially since the outbreak of COVID-19 at the beginning of this year (2020), the American Alliance of Museums (AAM) recently stated that nearly a third of the museums in the United States may be permanently closed since museum operations are facing “extreme financial difficulties.” This research is aimed at museums using the business model of “digital authorization”. It proposes an authorization mechanism based on blockchain technology protecting the museums’ digital rights in the business model and the application of cryptography. The signature and time stamp mechanism achieve non-repudiation and timeless mechanism, which combines blockchain and smart contracts to achieve verifiability, un-forgery, decentralization, and traceability, as well as the non-repudiation of the issue of cash flow with signatures and digital certificates, for the digital rights of museums in business. The business model proposes achievable sustainable development. Museums not only achieve the goal of promoting social education, but also solve their financial problems.

Mashups, which use multiple sources to create a new service, emerged as an evolution of Web 2.0. However, scalable access control for mashups is difficult. To enable a mashup to gather data from legacy applications and services, users must obey as the mashup host orders. These orders are created without any standard or limits about the privacy protection. This authorization approach violated the principle of least privilege and leaves users vulnerable to misuse of their private information by malicious mashups. To overcome the limitations, we introduce the privacy-preserving authorization method for mashups, which encapsulates the data of backend services with different private sensitivity degrees before the authorization process executes. We also give the data-user relationship model to make standard for backend services when defining private sensitivity degrees of users' data. In this progress, standard encapsulation file and authorization file are created successively. In the end, the authorization steps, which could be set stored for regular use of the mashups, are created based on the authorization mechanism and authorization file. The proposed method mainly focuses on the users and backend services, which are the real data owners. Through this method, users have the ability to observe and control the data involved in the mashup, and the backend services can take the responsibility of their users' private information protecting. In the end of the paper, the application example and a series of experimental study are given to demonstrate the feasibility and efficiency of this method. [ABSTRACT FROM AUTHOR]

XML is rapidly emerging as a standard for data representation and exchange over the World Wide Web and an increasing amount of sensitive business data is processed in XML format. Therefore, it is critical to have control mechanisms to restrict a user to access only the parts of XML documents that she is authorized to access. In this paper, we propose the first DTD-based access control model that employs graph matching to analyze if an input query is fully acceptable, fully rejectable, or partially acceptable. In this way, there will be no further security overhead for the processing of fully acceptable and rejectable queries. For partially acceptable queries, we propose a graph-matching based authorization model for an optimized rewriting procedure in which a recursive query (query with descendant axis '//') will be rewritten into an equivalent recursive one if possible and into a non-recursive one only if necessary, resulting queries that can fully take advantage of structural join based query optimization techniques. Moreover, we propose an index structure for XML element types to speed up the query rewriting procedure, a facility that is potentially useful for applications with large DTDs. Our performance study results showed that our algorithms armed with rewriting indexes are promising. [ABSTRACT FROM AUTHOR]

A workflow authorization model based on credentials was proposesed. It can nicely satisfy the features that workflows in actual application should satisfying. This model uses access control list based on task state which nicely ensure synchronizing authorization flow with workflow; specifies authorization policy not only based on user identifiers but also based on user qualifications and characteristics; defines a set of constraint rules for a task and seek the eligible users to execute the task according to the type of each constraint rule which realize dynamic separation of duty; and realizes the access granularity of authorization ranging from objects to specific parts of objects which ensure the least privilege constraints much more better. [ABSTRACT FROM AUTHOR]

The MPEG-21 Rights Expression Language (REL) is an XML-based language for digital rights management (DRM), providing a universal method for specifying rights and conditions associated with the distribution and use of assets like content, resources and services. Evolved from the eXtensible rights Markup language (XrML), the REL facilitates the creation of an open DRM architecture for managing and protecting these assets. As a general-purpose rights expression language, the REL is agnostic to types of assets, platforms and media, and expressive enough to support applications that can be even beyond DRM, including protecting privacy. It also contains additional capabilities in the areas of extensibility, security, trust management, and life cycle management of rights. This article provides an overview of the REL in terms of its data model, expressiveness, authorization model, structure for extensibility and profiling, and usages in digital media, trust management, and web services. To support the REL and provide extensive semantics for the management of rights, MPEG-21 also defined a Rights Data Dictionary (RDD). Based on original work conducted by , the MPEG-21 RDD specifies a methodology and structure for the RDD dictionary. The specification defines a core set of terms and provides a mechanism for the introduction of further terms through a registration authority. The RDD also supports the mapping of terms from different namespaces. [ABSTRACT FROM PUBLISHER]