Asier Technology is proposing an automated method for tagging, searching and sharing sensitive information across multiple security domains. This approach centers on a cryptographically enabled search engine and an automated method of adding XML meta-data to existing files to encrypting and store them securely. Off-the-shelf search engine and display software would be modified to cryptographically enforce information assurance policies end-to-end, across all security domains. In essence, an authorized and authenticated user would enter search criteria and receive results based on his or her role and responsibility. Different people would receive different results with the same search criteria. The sensitive material remains encrypted with a high degree of granularly as it is stored and processed; it is only decrypted when it is displayed on an authorized user's screen. Asier plans to leverage existing search engine and context sensitive data-mining algorithms and combine them with sound INFOSEC strategies to build a cross-platform system capable of handling the information retrieval and sharing needs of disparate agencies securely. We believe that is a near term solution to horizontal data fusion problems.
Keywords: MULTILEVEL SECURITY, CROSS-DOMAIN SECURITY, TRUST MANAGEMENT, DATA MINING, INFORMATION SHARING, COLLABORATION, DATA CORRELATION AND FUSION
