Shouhuai Xu's guest appearances

Shouhuai Xu

CERIAS Weekly Security Seminar - Purdue University

Ryan Henry

Cory Doctorow

Doug Smith

Larry Ponemon

George Heron

Laura Thomas

Eli Lilly

Stephen Elliott

Tony Sager

David Carroll

Jack Daniel

Joe Judge

Chris Reed

Richard III

John Richardson

OwlTail

Access control in decentralized systems is an important problem that has not been fully understood, except perhaps that it should be based on credentials. There are mainly two research approaches towards this goal: one is to pursue powerful individual credentials yet without necessarily considering flexible access control policies, the other is to consider flexible policies yet without necessarily accommodating the useful credential schemes that have become available. This paper proposes a unified approach that simultaneously consider flexible policies and useful credentials. A first realization of this approach is the notion of assembly signatures (and identifications), which are: (1) privacy-preserving, meaning that the access requestor's privacy is ensured; (2) policy-driven, meaning that the validity of a signature is with respect to a given access control policy; (3) ``mixed credentials"-based, meaning that a signature is constructed out of various anonymous and non-anonymous credentials. (This is a joint work with Moti Yung) About the speaker: Shouhuai Xu is an assistant professor in the Department of Computer Science, University of Texas, San Antonio. He earned his PhD in computer science in 2000 from Fudan University, China. He is interested in system-oriented security design and analysis, with a current emphasis on cryptographic design and analysis. His research is funded by NSF, ARO etc. Please refer to http://www.cs.utsa.edu/~shxu for more information. 

Access control in decentralized systems is an important problem that has not been fully understood, except perhaps that it should be based on credentials. There are mainly two research approaches towards this goal: one is to pursue powerful individual credentials yet without necessarily considering flexible access control policies, the other is to consider flexible policies yet without necessarily accommodating the useful credential schemes that have become available. This paper proposes a unified approach that simultaneously consider flexible policies and useful credentials. A first realization of this approach is the notion of assembly signatures (and identifications), which are: (1) privacy-preserving, meaning that the access requestor's privacy is ensured; (2) policy-driven, meaning that the validity of a signature is with respect to a given access control policy; (3) ``mixed credentials"-based, meaning that a signature is constructed out of various anonymous and non-anonymous credentials. (This is a joint work with Moti Yung) About the speaker: Shouhuai Xu is an assistant professor in the Department of Computer Science, University of Texas, San Antonio. He earned his PhD in computer science in 2000 from Fudan University, China. He is interested in system-oriented security design and analysis, with a current emphasis on cryptographic design and analysis. His research is funded by NSF, ARO etc. Please refer to <a href="http://www.cs.utsa.edu/~shxu" rel="nofollow" target="_blank">http://www.cs.utsa.edu/~shxu</a> for more information.

Shouhuai Xu, Privacy-preserving Policy-driven Access Control with Mixed Credentials