Object-Based Security - Annual Report 2013

This report summarizes the activities and tasks that have been performed within the FoT-project Object-Based Security during the year of 2013. The main task for the project has been to study the possibilities to realize a security model where security functionality is tied directly to a data object, thus becoming less dependent of a system-oriented perimeter protection. Within the context of the project's main questions, there is also a task to study how access control can be refined by the use of a more fine-grained control function. The techniques that have been the focus of this year's research are Attribute-Based Encryption and Attribute-Based Access Control. The project is partially performed as a collaboration with the NATO research groups Information Assurance / Cyber Defence Research Framework and Trusted Information Sharing for Partnerships.