Review and revocation of access privileges distributed with PKI certificates

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2133, Issue , 2001, Pages 100-112

  Khurana, Himanshu ^a   Gligor, Virgil D ^a  

^a UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; NETWORK SECURITY; PUBLIC KEY CRYPTOGRAPHY;

CERTIFICATE REVOCATION; IDENTITY CERTIFICATES; PKI CERTIFICATES; PUBLIC KEY INFRASTRUCTURE;

ACCESS CONTROL;

EID: 0010389068     PISSN: 03029743     EISSN: 16113349     Source Type: Journal    
DOI: 10.1007/3-540-44810-1_15     Document Type: Article

References (12)

1. M. Abadi, M. Burrows, B. Lampson, and G. D. Plotkin, A Calculus for Access Control in Distributed Systems, ACM Transactions on Programming Languages and Systems, Vol. 15, No. 4, September 1993, pp. 706-734
2. C. M. Ellison. SPKI Certificate documentation, http://www.clark.net/pub/cme/html/spki.html, 1998.
3. V. D. Gligor, Review and Revocation of Access Privileges Distributed Through Capabilities, IEEE Transactions on Software Engineering, Vol. 5, No. 6, November 1979, pp. 575-586.
4. V. D. Gligor and S. I. Gavrila, Application-Oriented Security Policies and their Composition, in Proceedings of Security Protocols 6th International Workshop. Cambridge, UK, April 1998.
5. V. D. Gligor, S. I. Gavrila, and D. Ferraiolo, On the Formal Definition of Separationof-Duty Policies and their Composition, Proceedings of the 1998 IEEE Symposium on Security and Privacy, Oakland, California, May 1998.
6. R. Housley, W. Ford, W. Polk, D. Solo. Internet X.509 Public Key Infrastructure: Certificate and CRL Profile (draft-ietf-pkix-ipki-part1-08.txt). PKIX Working Group. Internet Draft. June 16,1998.
7. S. Kent. Privacy Enhancement for Internet Electronic Mail: Part II: Certificate-Based Key Management, RFC 1422, IAB IRTF PSRG, IETF PEM WG, Feb 1993.
8. B. Lampson, M. Abadi, M. Burrows and E. Wobber, Authentication in distributed systems: Theory and Practice. ACM Transactions on Computer Systems 10(4): 265-310, November 1992.
9. S. Micali. Efficient Certificate Revocation. Technical Memo MIT/LCS/TM-542b, Massachusetts Institute of Technology, Laboratory for Computer Science, Mar. 1996.
10. M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams. X.509 Internet Public Key Infrastructure: Online Certificate Status Protocol-OCSP (draft-ietf-pkix-ocsp-03.txt). PKIX Working Group. Internet Draft. March 1998.
11. R. L. Rivest and B. Lampson. SDSI-a simple distributed security infrastructure. (See SDSI web page at http://theory.lcs.mit.edu/cis/sdsi.html.)
12. S. Stubblebine and R. Wright. An Authentication Logic Supporting Synchronization, Revocation, and Recency, Third ACM Conference on Computer and Communications Security, New Delhi, India, March, 1996, pp. 95-105.