The modern data economy is built on sharing data. However, sharing data can be an expensive and risky endeavour. Existing sharing systems like Distributed File Systems provide full read, write, and execute Role-based Access Control (RBAC) for sharing data, but can be expensive and difficult to scale. Likewise such systems operate on a binary access model for their data, either a user can read all the data or read none of the data. This approach is not necessary for a more read-only oriented data landscape, and one where data contains many dimensions that represent a risk if overshared. In order to encourage users to share data and smooth out the process of accessing such data a new approach is needed. This new approach must simplify the RBAC of older DFS approaches to something more read-only and something that integrates redaction for user protections. To accomplish this we present CageCoach, a simple sharing-oriented Distributed Cryptographic File System (DCFS). CageCoach leverages the simplicity and speed of basic HTTP, linked data concepts, and automatic redaction systems to facilitate safe and easy sharing of user data. The implementation of CageCoach is available at https://github.umn.edu/CARPE415/CageCoach.
翻译:摘要:现代数据经济建立在数据共享的基础之上。然而,数据共享可能是一项昂贵且充满风险的尝试。现有的共享系统(如分布式文件系统)通过基于角色的访问控制(RBAC)提供完整的读取、写入和执行权限,但这类系统成本高昂且难以扩展。此外,这些系统对数据采用二元访问模型——用户要么能读取全部数据,要么完全无法读取数据。对于更偏向只读的数据环境,以及数据包含多个维度因而过度共享会带来风险的情况,这种方式并非必需。为了鼓励用户共享数据并简化数据访问流程,需要一种新的方法。这种方法必须将传统DFS系统的RBAC简化为更偏向只读的模型,并集成用于用户隐私保护的可编辑功能。为此,我们提出了CageCoach——一种面向共享的简易分布式加密文件系统(DCFS)。CageCoach利用基本HTTP协议的简洁性与速度、关联数据概念以及自动编辑系统,以促进用户数据的安全便捷共享。CageCoach的实现代码可在https://github.umn.edu/CARPE415/CageCoach获取。