隐私:通过私人投票实现在线民主
Privocracy: Online Democracy through Private Voting
AI总结:
Privocracy 通过安全的电子投票机制实现对敏感资源的访问控制,减少高特权依赖,提升系统隐私和安全性。
摘要:
在传统的访问控制策略中,每次授予的访问权限和管理账户都会引入额外的漏洞,因为高特权用户的腐败可能会 compromise 多个敏感文件。Privocracy 是一种访问控制机制,通过触发安全的电子投票程序来运行需要使用敏感资源的命令,从而减少对高特权的依赖。通过 Privocracy,组织可以将信任分布在资源访问上,从而最小化系统因单点故障带来的漏洞,同时保持了高灵活性的自主访问控制策略。Privocracy 投票机制实现了永恒的隐私,确保无论对手的计算能力如何,选票都保持保密,同时满足了实际安全系统的需求。该程序还包含了一些有用的功能,如投票委托以减少选民疲劳,快速投票轮次以在紧急情况下快速行动,以及选择性投票审计以实现应用层面的责任。我们的实验结果表明,Privocracy 能够高效地处理选票,并且可以在通用硬件上部署。
英文摘要:
In traditional access control policies, every access granted and administrative account introduces an additional vulnerability, as a corruption of a high-privilege user can compromise several sensitive files. Privocracy is an access control mechanism that minimizes the need to attribute high privileges by triggering a secure e-voting procedure to run commands that require using sensitive resources. With Privocracy an organization can distribute trust in resource access, minimizing the system vulnerabilities from single points of failure, all while maintaining the high flexibility of discretionary access control policies. The Privocracy voting mechanism achieves everlasting privacy, ensuring votes remain confidential regardless of an adversary's computational power, while addressing the dependability requirements of a practical and secure system. The procedure incorporates useful features such as vote delegation to reduce voter fatigue, rapid voting rounds to enable quick action during emergencies, and selective vote auditing for application-level accountability. Our experimental results demonstrate that Privocracy processes votes efficiently and can be deployed on commodity hardware.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。