Secure Information Caching on the Web

Abstract

Web has become the key information source over the last few years and caching has been exploited and applied to reduce web server and network congestion as well as to improve response time. There are three types of web caching techniques: forward proxy, reverse proxy, and transparent proxy. Forward proxy server caches data close to users and is targeted to improve the user/browser response time. On the contrary, reverse proxy server normally locates next to a back-end server and is mainly targeted to reduce back-end server workload. As the web moving from primarily for information sharing to also becoming a key platform for business operations, a new generation of caching mechanism is needed to enforce the security of business content and to preserve the confidentiality of personal information. In this paper, we describe a web caching system that enhances the caching function by optionally enforcing fine grain access control rules, set by the back-end servers, on the cached content. Our system takes advantage of edge (proxy) server technology for delivering data/information from locations adjacent to users while enforcing access control rule set for each piece of cached content or page fragment.