{"id":"https://openalex.org/W2766438476","doi":"https://doi.org/10.3233/jcs-171004","title":"Enforcing authorizations while protecting access confidentiality","display_name":"Enforcing authorizations while protecting access confidentiality","publication_year":2017,"publication_date":"2017-11-03","ids":{"openalex":"https://openalex.org/W2766438476","doi":"https://doi.org/10.3233/jcs-171004","mag":"2766438476"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-171004","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jcs-171004","pdf_url":"https://content.iospress.com:443/download/journal-of-computer-security/jcs171004?id=journal-of-computer-security%2Fjcs171004","source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://content.iospress.com:443/download/journal-of-computer-security/jcs171004?id=journal-of-computer-security%2Fjcs171004","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024313767","display_name":"Sabrina De Capitani di Vimercati","orcid":"https://orcid.org/0000-0003-0793-3551"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Sabrina De Capitani di Vimercati","raw_affiliation_strings":["Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I189158943"]},{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069907040","display_name":"Sara Foresti","orcid":"https://orcid.org/0000-0002-1658-6734"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Sara Foresti","raw_affiliation_strings":["Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I189158943"]},{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026292704","display_name":"Stefano Paraboschi","orcid":"https://orcid.org/0000-0003-0399-1738"},"institutions":[{"id":"https://openalex.org/I11039511","display_name":"University of Bergamo","ror":"https://ror.org/02mbd5571","country_code":"IT","type":"education","lineage":["https://openalex.org/I11039511"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Paraboschi","raw_affiliation_strings":["Dipartimento di Ingegneria Gestionale, dell\u2019Informazione e della Produzione, Universit\u00e0 degli Studi di Bergamo, Italy. E-mail:\u00a0","Dipartimento di Ingegneria Gestionale, dell\u2019Informazione e della Produzione, Universit\u00e0 degli Studi di Bergamo, Italy. E-mail:\u00a0parabosc@unibg.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Ingegneria Gestionale, dell\u2019Informazione e della Produzione, Universit\u00e0 degli Studi di Bergamo, Italy. E-mail:\u00a0","institution_ids":["https://openalex.org/I11039511"]},{"raw_affiliation_string":"Dipartimento di Ingegneria Gestionale, dell\u2019Informazione e della Produzione, Universit\u00e0 degli Studi di Bergamo, Italy. E-mail:\u00a0parabosc@unibg.it","institution_ids":["https://openalex.org/I11039511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059940813","display_name":"Gerardo Pelosi","orcid":"https://orcid.org/0000-0002-3812-5429"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Gerardo Pelosi","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di Milano, Italy. E-mail:\u00a0","Dipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di Milano, Italy. E-mail:\u00a0gerardo.pelosi@polimi.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di Milano, Italy. E-mail:\u00a0","institution_ids":["https://openalex.org/I93860229"]},{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria, Politecnico di Milano, Italy. E-mail:\u00a0gerardo.pelosi@polimi.it","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091211008","display_name":"Pierangela Samarati","orcid":"https://orcid.org/0000-0001-7395-4620"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Pierangela Samarati","raw_affiliation_strings":["Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0,\u00a0,\u00a0","institution_ids":["https://openalex.org/I189158943"]},{"raw_affiliation_string":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, Italy. E-mails:\u00a0sabrina.decapitani@unimi.it,\u00a0sara.foresti@unimi.it,\u00a0pierangela.samarati@unimi.it","institution_ids":["https://openalex.org/I189158943"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5024313767"],"corresponding_institution_ids":["https://openalex.org/I189158943"],"apc_list":null,"apc_paid":null,"fwci":0.6243,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.77905758,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"26","issue":"2","first_page":"143","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.7713096141815186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7011756300926208},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6020864844322205},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.40964993834495544}],"concepts":[{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.7713096141815186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7011756300926208},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6020864844322205},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.40964993834495544}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3233/jcs-171004","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jcs-171004","pdf_url":"https://content.iospress.com:443/download/journal-of-computer-security/jcs171004?id=journal-of-computer-security%2Fjcs171004","source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:air.unimi.it:2434/545547","is_oa":true,"landing_page_url":"http://hdl.handle.net/2434/545547","pdf_url":null,"source":{"id":"https://openalex.org/S4306400516","display_name":"Archivio Istituzionale della Ricerca (Universita Degli Studi Di Milano)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189158943","host_organization_name":"University of Milan","host_organization_lineage":["https://openalex.org/I189158943"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:aisberg.unibg.it:10446/116608","is_oa":false,"landing_page_url":"http://hdl.handle.net/10446/116608","pdf_url":null,"source":{"id":"https://openalex.org/S4377196347","display_name":"Aisberg (University of Bergamo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11039511","host_organization_name":"University of Bergamo","host_organization_lineage":["https://openalex.org/I11039511"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:re.public.polimi.it:11311/1045313","is_oa":true,"landing_page_url":"http://hdl.handle.net/11311/1045313","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.3233/jcs-171004","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jcs-171004","pdf_url":"https://content.iospress.com:443/download/journal-of-computer-security/jcs171004?id=journal-of-computer-security%2Fjcs171004","source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5113594253","display_name":null,"funder_award_id":"312797","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"},{"id":"https://openalex.org/G7210799485","display_name":null,"funder_award_id":"644579","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2766438476.pdf","grobid_xml":"https://content.openalex.org/works/W2766438476.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W70096886","https://openalex.org/W177444027","https://openalex.org/W1495119096","https://openalex.org/W1498316612","https://openalex.org/W1510795740","https://openalex.org/W1513098086","https://openalex.org/W1547131737","https://openalex.org/W1639057076","https://openalex.org/W1669357884","https://openalex.org/W1821700043","https://openalex.org/W1822223425","https://openalex.org/W1963094505","https://openalex.org/W1997575000","https://openalex.org/W2005756274","https://openalex.org/W2014465787","https://openalex.org/W2021328268","https://openalex.org/W2022334901","https://openalex.org/W2037357643","https://openalex.org/W2043508455","https://openalex.org/W2048543827","https://openalex.org/W2066614063","https://openalex.org/W2068617013","https://openalex.org/W2071940270","https://openalex.org/W2076046175","https://openalex.org/W2076623138","https://openalex.org/W2100095839","https://openalex.org/W2105751742","https://openalex.org/W2105819273","https://openalex.org/W2108072891","https://openalex.org/W2132257180","https://openalex.org/W2138001464","https://openalex.org/W2144591754","https://openalex.org/W2150659174","https://openalex.org/W2170993700","https://openalex.org/W2294070790","https://openalex.org/W2486253829","https://openalex.org/W2536293744","https://openalex.org/W2751808730","https://openalex.org/W2951309617"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2478288626","https://openalex.org/W2350741829","https://openalex.org/W2530322880","https://openalex.org/W1596801655"],"abstract_inverted_index":{"Cloud":[0],"computing":[1],"is":[2,91,139],"the":[3,22,28,40,44,74,94,101,128,132,135,149,162,174,189],"reference":[4],"paradigm":[5],"to":[6,21,114,123],"provide":[7],"data":[8,20,31,45,61,104,116,151],"storage":[9],"and":[10,15,32,99,105,156,168,183],"management":[11],"in":[12,107],"a":[13,54],"convenient":[14],"scalable":[16],"manner.":[17],"However,":[18],"moving":[19],"cloud":[23],"raises":[24],"several":[25],"issues,":[26],"including":[27],"confidentiality":[29,136],"of":[30,33,43,96,103,127,137,161,176],"accesses":[34,138],"that":[35,82,119],"are":[36,62],"no":[37],"more":[38],"under":[39],"direct":[41],"control":[42,164],"owner.":[46],"The":[47,141],"shuffle":[48,75,109],"index":[49,76],"has":[50],"been":[51],"proposed":[52,142],"as":[53,158,160],"solution":[55],"for":[56,79,84],"addressing":[57],"these":[58],"issues":[59],"when":[60],"stored":[63],"at":[64,131],"an":[65],"external":[66],"third":[67],"party.":[68],"In":[69],"this":[70],"paper,":[71],"we":[72],"extend":[73],"with":[77],"support":[78],"access":[80,113,124,163,178],"control,":[81],"is,":[83],"enforcing":[85],"authorizations":[86,106,118],"on":[87,93,100],"data.":[88],"Our":[89],"approach":[90,143,172],"based":[92],"use":[95],"selective":[97],"encryption":[98],"organization":[102],"two":[108],"indexes.":[110],"Owners":[111],"regulate":[112],"their":[115],"through":[117],"allow":[120],"different":[121,125],"users":[122],"portions":[126],"data,":[129],"while,":[130],"same":[133],"time,":[134],"guaranteed.":[140],"also":[144],"supports":[145],"update":[146],"operations":[147,182,186],"over":[148],"outsourced":[150],"collection":[152],"(i.e.,":[153,166],"insertion,":[154],"removal,":[155],"update)":[157],"well":[159],"policy":[165],"grant":[167],"revoke).":[169],"Also,":[170],"our":[171],"protects":[173],"nature":[175],"each":[177],"operation,":[179],"making":[180],"revoke":[181],"resource":[184],"removal":[185],"indistinguishable":[187],"by":[188],"storing":[190],"server":[191],"and/or":[192],"observing":[193],"users.":[194]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2017-11-10T00:00:00"}
