Secure information sharing enabled by Trusted Computing and PEI models

The central goal of secure information sharing is to "share but protect" where the motivation to "protect" is to safeguard the sensitive content from unauthorized disclosure (in contrast to protecting the content to avoid loss of revenue as in retail Digital Rights Management). This elusive goal has been a major driver for information security for over three decades. Recently, the need for secure information sharing has dramatically increased with the explosion of the Internet and the convergence of outsourcing, offshoring and B2B collaboration in the commercial arena and the real-world demonstration of the tragic consequences of lack of information sharing in the national security arena. As technology has made the "share" aspect ever easier so has it increased the difficulty of enforcing the "protect" aspect. The central contribution of this paper is to show that the emergence of industrial strength Trusted Computing (TC) technology offers a ra...

• Type: Conference
• Year: 2006
• Where: CCS
• Authors: Ravi S. Sandhu, Kumar Ranganathan, Xinwen Zhang
• Keywords: CCS 2006, Implementation Models, Policy Model, Secure Information Sharing, Security Privacy