Enforcing Policies in Content Manipulation Signature Schemes

10.6633/IJNS.200607.3(1).10

Martin Stanek

Merkle tree ； policy enforcement ； signature schemes

International Journal of Network Security

3卷1期（2006 / 07 / 01）

65 - 72

英文

Recently proposed content manipulation signatures schemes have a broad range of applications, such as authenticated content extraction, adaptive multimedia con- tent delivery, and XML authentication. Most of the constructions are based on Merkle trees. We show that these constructions are unable to enforce manipulation (extraction) policies, i.e. rules defining what manipulations are permitted/prohibited. We propose a generalization of Merkle trees, so called Relaxed Merkle trees. We present their ability to enforce some useful classes of policies, analyze their expressive power, and discuss few enhancements.