Information flow control in object‐based peer‐to‐peer publish/subscribe systems

Abstract

Summary In this paper, we propose a P2PPSO (P2P [peer‐to‐peer] type of topic‐based Publish/Subscribe with Object concept) model, where each peer process (peer) exchanges objects by publishing and receiving event messages with no centralized coordinator. In addition, objects are characterized by topics. Suppose an event message ej published by a peer pj carries an object on some topics into a target peer pi. Here, information in the peer pj illegally flows to the peer pi if the target peer pi is not allowed to subscribe the topics. An illegal object is an object whose topics a target peer is not allowed to subscribe. Even if an event message is received by a target peer by checking topics, objects carried by the event message may be illegal at the target peer. In this paper, we propose a TOBS (topics‐of‐objects–based synchronization) protocol to prevent target peers from receiving illegal objects in the P2PPSO model. Here, even if an event message is received by a target peer, illegal objects in the event message are not delivered to the target peer. In the evaluation, we show how many event messages carry illegal objects in the TOBS protocol.

Implementation and evaluation of the information flow control for the Internet of Things

“…-Resource object (RO) (variable size): RO r k m of the hybrid device d k which is allowed to manipulate in the operation designated in the previous element OP. 7. Not_before (NB) (10 bytes): time before when the capability token cap i g must not be valid.…”

“…Hence, we have to prevent illegal information flow among subjects and objects in the access control models. In our previous studies, [4][5][6][7] various types of protocols to prevent illegal information flow are proposed. In the articles, 4,5 protocols to prevent illegal information flow occurring in database systems are proposed based on the RBAC (role-based access control) model.…”

“…8 In addition, protocols to prevent illegal information flow occurring in the P2PPSO (Peer-to-Peer publish/subscribe with object concept) systems are proposed based on the TBAC (topic-based access control) model 9 in the articles. 6,7 The IoT (Internet of Things) is composed of various types and millions of nodes including not only computers but also devices such as sensors and actuators. 10,11 In the access control models such as the RBAC 8 and ABAC (attribute-based access control) 12 models, access rules showing what subject can access what object in which type of operation are maintained and have to be checked for each access right.…”

“…In the articles, 4,5 protocols to prevent illegal information flow occurring in database systems are proposed based on the RBAC (role‐based access control) model 8 . In addition, protocols to prevent illegal information flow occurring in the P2PPSO (Peer‐to‐Peer publish/subscribe with object concept) systems are proposed based on the TBAC (topic‐based access control) model 9 in the articles 6,7 …”

Cognitive and innovative computation paradigms for big data and cloud computing applications

“…In the paper “Information flow control in object‐based peer‐to‐peer publish/subscribe systems” by S. Nakamura, T. Enokido, and M. Takizawa the P2PPSO (P2P Publish/Subscribe with Object concept) system was presented. These systems can use also TOBS protocols, in which illegal objects are not delivered to the target peer.…”