1.  Copyright 2006 Digital Enterprise Research Institute. All rights reserved. www.deri.ie 1 Annotation-Based Access Control for e-Professionals Authors: Peyman Nasirifard and Vassilios Peristeras Presenter: Deirdre Lee

2. 2 Shortcomings of current access control mechanism in shared workspaces and social platforms Annotation-Based Access Control Use Case Scenario Uncle-Share Outline

3. 3 Current Access Control Sharing data/resources: –Shared Workspaces (BSCW,NetWeaver, SharePoint, etc.) –Social Networking Sites (Flickr, YouTube, del.icio.us, etc.) Sharing needs access control Current approaches: –Access control lists (email contacts) –Role-based access control (root, admin, user) –Social-based access control (friend, knows)

4. 4 Problems with Current Access Control Problems with current approaches: –Course-grained: Private vs. Public, share with ‘friends‘ –Fixed vocabulary, no flexibility –Too complex Result of current approaches: –Messaging, email To move from messaging to sharing: –Social-awareness based access-control

5. 5 Real-Life Access control We share resources based on social relationships we attribute to people –We may share our credit card details with our parents, but not with out friends. We mentally annotate people, meaning of term may differ between people –parent, supervisor, friend, close friend, director, etc. Real life model can be applied to online model –Annotation-Based Access Control more natural and flexible

6. 6 Annotation-Based Access Control Model

7. 7 Benefits of Annotation-Based Approach Flexible –Fixed Vocabularies & Open Vocabularies User distance may be calculated All relationships are private

8. 8 Use Case Scenario

9. 9 Uncle-Share Widget Login: User login or registration, including full name, user name, and password. Person: User may add, modify, and annotate contact list. Resources: User may add resources (URL/URI/short message) and assign them policies, with distance. Shared: User may see the resources that have been shared with him by others. The distance may be set in order to increase or decrease the scope of the shared resources. Settings: User and server configuration. Help: Provides a tutorial video and some technical and contact information regarding the platform.

10. 10 Features Widget –Can be embedded into any Web page or widget platform –Syndication, flexibility, portability, and customization. Service Oriented Architecture (SOA) –All functionalities are wrapped as services AJAX –No additional interations with the server Suggest Box – Suggests annotations to end users based on RELATIONSHIP ontology which contains general social acquaintances

11. 11 Embedded Widget

12. 12 Future Work Extend the model to include context-aware information, as opposed to user-defined. Using the Open Social API, embed the uncle-share widget into social networking sites, such as MySpace or Xing. Integrate Uncle-Share with social bookmarking systems, such as del.icio.us

13. 13 Annotation-Based Access Control Try it yourself: http://vmecos.deri.ie:8081/uncle-share Contact: peyman.nasirifard@deri.org