XML [15] has become a standard format for information that moves within the World Wide Web. Previous work in securing XML documents concentrated mainly on textual documents. Those proposals are ineffective in the context of multimedia, which mostly comprises of some sensible combination of images, text, audio, and video. As multimedia constitutes a significant component of the traffic within the Internet, it requires to be secured. We propose an access control model and an encryption mechanism that enforces access control and maintains integrity of multimedia by using the Synchronized Multimedia Integration Language (SMIL)[1], thereby preventing illegal or malicious unauthorized access or modifications to the media documents in transition. We show its utility in safeguarding pay-per-view movies and multi-level secure coalitions observing unfolding scenarios.

In this paper, we propose a secure distribution model for multimedia surveillance data, where different locations of the monitored facilities may have different security requirements. We propose a multilevel security framework, wherein the surveillance data streams are classified according to the sensitivity of the location of the surveillance devices, and users (guards) have corresponding security clearances. Guards monitor live multimedia feeds emanating from surveillance devices placed throughout the facility. Our position is that during normal mode of operation, guards are allowed to access only those multimedia streams for which they have the proper authorizations. However, in an emergency, guards may receive pre-computed emergency instructions and/or cover stories. We show how to compose multilevel secure SMIL documents, compute views for each security classification, enforce integrity, confidentiality and access control, and deliver the secure views to handheld devices while 1.

No abstract

Abstract. The Synchronized Multimedia Integration Language (SMIL) [Aya01] is an W3C[W3C03] specification for authoring multimedia documents. Although SMIL has XML like syntactic constructs, unlike XML, SMIL compositions have an intended interpretation stemming from intuitive notions of playing out many media streams relative to each other. Thus, more than one SMIL syntactic expression can represent a multimedia composition with the same intended semantics. In this work we propose a normal form for SMIL objects that allows to specify security policies that are independent of representational syntax. We also show how to represent access control and QoS polices applicable to multimedia compositions by decorating SMIL compositions with RDF [KC03] statements. Our RDF statements are based on an RDF structure tailored to represent known security paradigms such as Discretionary, Mandatory, and Role-Based Access Control. Once the security paradigm is chosen and the SMIL document is decorated with security and QoS specifications, we show how to create secure views of the SMIL document. We call these views secure normal forms. Next, we show how a secure multimedia server can use these views to provide secure runtime environment.

No abstract