Multi-user authorization for simultaneous collaborative situation analysis workspaces using XACML

Arno Appenzeller; Erik Krempel; Pascal Birnstill; Jürgen Beyerer

doi:10.1117/12.2570824

17 September 2020 Multi-user authorization for simultaneous collaborative situation analysis workspaces using XACML

Arno Appenzeller, Erik Krempel, Pascal Birnstill, Jürgen Beyerer

Proceedings Volume 11542, Counterterrorism, Crime Fighting, Forensics, and Surveillance Technologies IV; 1154207 (2020) https://doi.org/10.1117/12.2570824
Event: SPIE Security + Defence, 2020, Online Only

Abstract

Multi-user applications where two or more users are interacting with the same system through a shared interface e.g., large presentation touchscreens in meeting rooms to do situation analysis in a civil security context are becoming more and more frequent. Whilst traditional single user authorization scenarios seem to be a solved problem and there are some existing solutions for collaborative multi-user applications with a separate devices per user, methods for multi-user authorization, where a single device is in simultaneous usage, come with a set of new questions. It must be considered that several users work simultaneously on the same physical device so there is no way to create a separate view for every user that fits their access rights. Especially in the context of civil security it is very likely that there are several users with different security levels and the data displayed is potential highly sensitive. Therefore new strategies are needed to decide which content is shown when certain users with potentially completely different access rights work together. We will define those strategies by doing considerations how to realize authorization for a simultaneous collaborative multi-user workspace. This is done by extending the well-known Bell-LaPadula model for multi-user authorization by using different strategies regarding data confidentiality. The feasibility of our formal models is shown with an implementation in XACML, which is described in detail. With this it is already possible to integrate our model in real world applications, which we show with the Fraunhofer Digital Map Table.

Conference Presentation

Citation Download Citation

Arno Appenzeller, Erik Krempel, Pascal Birnstill, and Jürgen Beyerer "Multi-user authorization for simultaneous collaborative situation analysis workspaces using XACML", Proc. SPIE 11542, Counterterrorism, Crime Fighting, Forensics, and Surveillance Technologies IV, 1154207 (17 September 2020); https://doi.org/10.1117/12.2570824

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available