Enforcing RFID data visibility restrictions using XACML security policies
Name
Sarma_Enforcing RFID.pdf
Size
2.16 MB
Format
Adobe PDF
Checksum (MD5)
0d5630d0e748da5dceb6f05426b6ffb1
Author(s)
Pardal, Miguel L.
Harrison, Mark
Marques, Jose Alves
Sarma, Sanjay Emani
Date Issued
November 2012
Journal
Proceedings of the 2012 IEEE International Conference on RFID-Technologies and Applications (RFID-TA)
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Citation
Pardal, Miguel L., Mark Harrison, Sanjay Sarma, and Jose Alves Marques. Enforcing RFID Data Visibility Restrictions Using XACML Security Policies. In 2012 IEEE International Conference on RFID-Technologies and Applications (RFID-TA), 413-418. Institute of Electrical and Electronics Engineers, 2012. doi:10.1109/RFID-TA.2012.6404558.
Version
Author's final manuscript
Abstract
Radio Frequency Identification (RFID) technology allows automatic data capture from tagged objects moving in a supply chain. This data can be very useful if it is used to answer traceability queries, however it is distributed across many different repositories, owned by different companies. Discovery Services (DS) are designed to assist in retrieving the RFID data relevant for traceability queries while enforcing sharing policies that are defined and required by participating companies to prevent sensitive data from being exposed. In this paper we define an interface for Supply Chain Authorization (SC-Az) and describe the implementation of two visibility restriction mechanisms based on Access Control Lists (ACLs) and Capabilities. Both approaches were converted to the standard eXtensible Access Control Markup Language (XACML) and their correctness and performance was evaluated for supply chains with increasing size.
MIT Department
Massachusetts Institute of Technology. Auto-ID Laboratory
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike 3.0
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1109/RFID-TA.2012.6404558
