A comprehensive review of usage control frameworks

IF 13.3 1区计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS

Computer Science Review Pub Date : 2024-12-09 DOI:10.1016/j.cosrev.2024.100698

Ines Akaichi, Sabrina Kirrane

{"title":"A comprehensive review of usage control frameworks","authors":"Ines Akaichi, Sabrina Kirrane","doi":"10.1016/j.cosrev.2024.100698","DOIUrl":null,"url":null,"abstract":"The sharing of data and digital assets in a decentralized settling is entangled with various legislative challenges, including, but not limited to, the need to adhere to legal requirements with respect to privacy and copyright. In order to provide more control to data and digital asset owners, usage control could be used to make sure that consumers handle data according to privacy, licenses, regulatory requirements, among others. However, considering that many of the existing usage control frameworks were designed to cater for different use cases (e.g., networking, operating systems, and industry 4.0), there is a need to better understand the existing proposals and how they compare to one another. In this paper, we provide a holistic overview of existing usage control frameworks and their support for a broad set of requirements. We systematically collect requirements that are routinely used to guide the development of usage control solutions, which are classified according to three broad dimensions: <ce:italic>specification</ce:italic>, <ce:italic>enforcement</ce:italic>, and <ce:italic>system</ce:italic>. We use these requirements to conduct a qualitative comparison of the most prominent usage control frameworks found in the literature. Finally, we identify existing gaps, challenges, and opportunities in the field of usage control in general, and in decentralized environments in particular.","PeriodicalId":48633,"journal":{"name":"Computer Science Review","volume":"106 1","pages":""},"PeriodicalIF":13.3000,"publicationDate":"2024-12-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computer Science Review","FirstCategoryId":"94","ListUrlMain":"https://doi.org/10.1016/j.cosrev.2024.100698","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

Abstract

The sharing of data and digital assets in a decentralized settling is entangled with various legislative challenges, including, but not limited to, the need to adhere to legal requirements with respect to privacy and copyright. In order to provide more control to data and digital asset owners, usage control could be used to make sure that consumers handle data according to privacy, licenses, regulatory requirements, among others. However, considering that many of the existing usage control frameworks were designed to cater for different use cases (e.g., networking, operating systems, and industry 4.0), there is a need to better understand the existing proposals and how they compare to one another. In this paper, we provide a holistic overview of existing usage control frameworks and their support for a broad set of requirements. We systematically collect requirements that are routinely used to guide the development of usage control solutions, which are classified according to three broad dimensions: specification, enforcement, and system. We use these requirements to conduct a qualitative comparison of the most prominent usage control frameworks found in the literature. Finally, we identify existing gaps, challenges, and opportunities in the field of usage control in general, and in decentralized environments in particular.

查看原文本刊更多论文

对使用控制框架的全面回顾

在去中心化结算中，数据和数字资产的共享与各种立法挑战纠缠在一起，包括但不限于遵守隐私和版权方面的法律要求。为了给数据和数字资产所有者提供更多的控制，可以使用使用控制来确保消费者根据隐私、许可证、监管要求等来处理数据。然而，考虑到许多现有的使用控制框架是为了迎合不同的用例而设计的（例如，网络、操作系统和工业4.0），有必要更好地理解现有的建议以及它们如何相互比较。在本文中，我们提供了现有使用控制框架的整体概述，以及它们对广泛需求的支持。我们系统地收集日常用于指导使用控制解决方案开发的需求，这些需求根据三个广泛的维度进行分类：规范、执行和系统。我们使用这些需求对文献中发现的最突出的使用控制框架进行定性比较。最后，我们确定了使用控制领域的现有差距、挑战和机遇，特别是在分散的环境中。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Computer Science Review Computer Science-General Computer Science

CiteScore

32.70

自引率

0.00%

发文量

审稿时长

51 days

期刊介绍： Computer Science Review, a publication dedicated to research surveys and expository overviews of open problems in computer science, targets a broad audience within the field seeking comprehensive insights into the latest developments. The journal welcomes articles from various fields as long as their content impacts the advancement of computer science. In particular, articles that review the application of well-known Computer Science methods to other areas are in scope only if these articles advance the fundamental understanding of those methods.