Attribute Certification: An Enabling Technology for Delegation and Role-Based Controls in Distributed Environments

RBAC 1999 - Proceedings of the 4th ACM Workshop on Role-Based Access Control

Volumn , Issue , 1999, Pages 121-130

  Linn, John ^a   Nyström, Magnus ^b  

^a RSA   (United States)

^b RSA Laboratories   (Sweden)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; AUTHORIZATION; DISTRIBUTED COMPUTER SYSTEMS;

AUTHORIZATION DECISION; COMPUTING ENVIRONMENTS; DECISION CRITERIONS; DISTRIBUTED ENVIRONMENTS; EMERGING TECHNOLOGIES; ENABLING TECHNOLOGIES; OPERATIONAL ENVIRONMENTS; PUBLIC KEY INFRASTRUCTURE; ROLE-BASED; SECURITY INFRASTRUCTURE;

PUBLIC KEY CRYPTOGRAPHY;

EID: 0012077289     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/319171.319183     Document Type: Conference Paper

References (12)

1. [ANSI99] American Bankers Association, Accredited Standards Committee X9, "Enhanced Management Controls Using Digital Signatures and Attribute Certificates," X9.45-1999 (ANSI X9.45).
2. thUSENIX Security Symposium, San Antonio, Texas, 1998.
3. [ERD093] M. Erdos, J. Pato, "Extending the OSF DCE Authorization System to Support Practical Delegation," ISOC Network and Distributed System Security Symposium (NDSS), 1993.
4. [FARR98a] S. Farrell, "TLS Extensions for AttributeCertificate Based Authorization," work in progress, IETF Transport Layer Security Working Group, August 1998.
5. [FARR98b] S. Farrell, "An Internet AttributeCertificate Profile for Authorization," work in progress, IETF Public-Key Infrastructure (X.509) Working Group, April 1999.
6. [GASS90] M. Gasser and E. McDermott, "An Architecture for Practical Delegation in a Distributed System," in Proceedings, 1990 IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA.
7. [HAYT98] R. J. Hayton, J. M. Bacon, and K. Moody, "Access Control in an Open Distributed Environment," in Proceedings, 1998 IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA.
8. [IS097] ISO/TEC 9594-8, "Information Technology - Open Systems Interconnection - The Directory: Authentication Framework," International Standardization Organization, 1997.
9. [IS098] ISO, "Proposed Draft Amendment on Certificate Extensions," generated from Collaborative ITU and ISO/IEC meeting on the Directory, Vancouver, British Columbia, Canada, 10-12 September 1998.
10. [KOHL93] J. Kohl, C. Neuman, "The Kerberos Network Authentication Service (v5)," IETF RFC 1510, September 1993.
11. [SAND95] R. Sandhu, "Groups and Roles," Proceedings, First ACM Workshop on Role-Based Access Control, Gaithersburg, MD, 30 November - 1 December 1995, pp. 1-25 and 1-26.
12. [SAND96] R. Sandhu, E. Coyne, H. Feinstein, and C. Youman, "Role-Based Access Control Models," IEEE Computer, Vol. 29, No. 2, February 1996, pp. 38-47.