An authorization model for geographical maps

ABSTRACT

Access control is an important component of any database management system. Several access control models have been proposed for conventional databases. However, these models do not seem adequate for geographical databases, due to the peculiarities of geographical data. Previous work on access control models for geographical data mainly concerns raster maps (images). In this paper, we present a discretionary access control model for geographical maps. We assume that each map is composed of a set of features. Each feature is represented in one or more maps by spatial objects, described by means of different spatial properties: geometric properties, describing the shape, extension and location of the objects, and topological properties, describing the topological relationships existing among objects. The proposed access control model allows the security administrator to define authorizations against map objects at a very fine granularity level, taking into account the various spatial representations and the object dimension. The model also supports both positive and negative authorizations as well as different propagation rules that make access control very flexible.

REFERENCES

• 1: V. Atluri and P. Mazzoleni. A uniform indexing scheme for geo-spatial data and authorizations. In Proc. of the Sixteen Conf. on Data and Application Security, 2002.
• 2: A. Belussi , B. Catania , E. Bertino, A reference framework for integrating multiple representations of geographical maps, Proceedings of the 11th ACM international symposium on Advances in geographic information systems, p.33-40, November 07-08, 2003, New Orleans, Louisiana, USA [doi>10.1145/956676.956681]
• 3: O. Consortium. OpenGIS Simple Features Specification for SQL. Technical Report OGC 99-049, 1999.
• 4: E. Bertino and M.L. Damiani. A controlled access to spatial data on web. In Proc. of the 7th AGILE Conf. on Geographic Information Science, 2004.
• 5: Elisa Bertino , Maria Luisa Damiani , Davide Momini, An Access Control System for a Web Map Management Service, Proceedings of the 14th International Workshop on Research Issues on Data Engineering: Web Services for E-Commerce and E-Government Applications (RIDE'04), p.33-39, March 28-29, 2004
• 6: Elisa Bertino , Sushi1 Jajodia , Pierangela Samarati, Supporting Multiple Access Control Policies in Database Systems, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.94, May 06-08, 1996
• 7: Eliseo Clementini , Paolino Di Felice , Peter van Oosterom, A Small Set of Formal Topological Relationships Suitable for End-User Interaction, Proceedings of the Third International Symposium on Advances in Spatial Databases, p.277-295, June 23-25, 1993
• 8: ISO TC 211 Geographic information/Geomatics. 19109, Geographic Information-Rules for Application Schema, 2003.
• 9: Max J. Egenhofer, Reasoning about Binary Topological Relations, Proceedings of the Second International Symposium on Advances in Spatial Databases, p.143-160, August 28-30, 1991
• 10: Fausto Rabitti , Elisa Bertino , Won Kim , Darrell Woelk, A model of authorization for next-generation database systems, ACM Transactions on Database Systems (TODS), v.16 n.1, p.88-131, March 1991 [doi>10.1145/103140.103144]
• 11: HongHai Shen , Prasun Dewan, Access control for collaborative environments, Proceedings of the 1992 ACM conference on Computer-supported cooperative work, p.51-58, November 01-04, 1992, Toronto, Ontario, Canada [doi>10.1145/143457.143461]

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.8 Database applications
          Subjects: Spatial databases and GIS

General Terms:
Management, Theory

Keywords:
GIS, access control, authorization model