Delegation logic: A logic-based approach to distributed authorization

ACM Transactions on Information and System Security

Volumn 6, Issue 1, 2003, Pages 128-171

  Li, Ninghui ^a,d   Grosof, Benjamin N ^b,e   Feigenbaum, Joan ^c,f  

^a STANFORD UNIVERSITY   (United States)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^c YALE UNIVERSITY   (United States)

^d Stanford University   (United States)

^e MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^f Yale University   (United States)

Author keywords

Access control; Delegation Logic; Distributed system security; Logic programs; Trust management

Indexed keywords

ACCESS CONTROL; DISTRIBUTED SYSTEM SECURITY; TRUST MANAGEMENT;

DATA PRIVACY; DISTRIBUTED COMPUTER SYSTEMS; FORMAL LOGIC; KNOWLEDGE REPRESENTATION; LOGIC PROGRAMMING;

SECURITY OF DATA;

EID: 0041524661     PISSN: 10949224     EISSN: None     Source Type: Journal    
DOI: 10.1145/605434.605438     Document Type: Article

References (42)

1. ABADI. M. 1998. On SDSI's linked local name spaces. J. Comput. Secu. 6, 1/2 (Jan./Feb.), 3-21.
2. ABADI, M., BURROWS, M., LAMPSON, B., AND PLOTKIN, G. 1993. A calculus for access control in distributed systems. ACM Trans. Prag. Lang. and Systems. 15, 4 (Oct.), 706-734.
3. AURA, T. 1998. On the structure of delegation networks. In Proceedings of the IEEE Computer Security Foundations Workshop (CSFW-11) (June). IEEE Computer Society Press, Los Alamitos, Calif., pp. 14-26.
4. BARAL C. AND GELFOND, M. 1994. Logic programming and knowledge representation. J. Logic Prog. 19/20 (May/July), 73-148.
5. BERTINO E., BUCCAFURRI F., FERRARI, E., AND RULLO, P. 1999. A logical framework for reasoning on data access control policies. In Proceedings of the IEEE Computer Security Foundations Workshop (CSFW-12), (July). IEEE Computer Society Press, Los Alamitos, Calif., pp. 175-189.
6. BLAZE, M., FEIGENBAUM J., IOANNIDIS J., AND KEROMYTIS, A. D. 1999a. The KeyNote trust-management system, version 2. IETP RFC 2704, September 1999.
7. BLAZE, M., FEIGENBAUM, J., IOANNIDIS, J., AND KEROMYTIS, A. D. 1999b. The role of trust management in distributed systems. In Secure Internet Programming, Lecture Notes in Computer Science, 1603. Springer, Berlin, pp. 185-210.
8. BLAZE M., FEIGENBAUM, J., AND LACY, J. 1996. Decentralized trust management. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp 164-173.
9. BLAZE, M., FEIGENBAUM, J., AND STRAUSS, M. 1998. Compliance-checking in the PolicyMaker trust management system. In Proceedings of Second International Conference on Financial Cryptography (FC'98), (Feb.). Lecture Notes in Computer Science, 1465. Springer, Berlin, pp. 254-274.
10. CCITT. 1989. Recommendation X.509: The Directory-Authentication Framework. Consultation Committee, International Telephone and Telegraph, International Telecommunications Union, Geneva.
11. CHEN W. AND WARREN, D. S. 1996. Tabled evaluation with delaying for general logic programs. J. ACM 43, 1 (Jan.), 20-74.
12. CHU, Y.-H., FEIGENBAUM, J., LAMACCHIA, B., RESNICK, P., AND STRAUSS, M. 1997. REFEREE: Trust management for web applications. World Wide Web Journal. 2, 706-734.
13. CLAHKE, D., ELIEN, J.-E., ELLISON, C., FREDETTE, M., MORCOS, A., AND RIVEST, R. L. 2001. Certificate chain discovery in SPKI/SDSI. J. Comput. Secu. 9, 4 (Nov.), 285-322.
14. DETREVILLE, J. 2002. Binder, a logic-based security language. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp. 105-113.
15. ELLISON, C., PBANTZ, B., LAMPSON, B., RIVEST, R. L., THOMAS, B., AND YLONEN, T. 1999a. SPKI certificate theory. IETP RFC 2693, September 1999.
16. ELLISON, C., FRANTZ, B., LAMPSON, B., RIVEST, R. L., THOMAS, B., AND YLONEN, T. 1999b. Simple public key certificates. Internet Draft (work in progress), July 1999. http://world.std.com/~cme/spki.txt.
17. FINNEY, H. 1996. Transitive trust and MLM. Post to cypherpunks mailing list, archived at http://www.inet-one.com/cypherpunks/dir.1996.05.02-1996.05.08/ msg00415.html.May1996.
18. HALPERN J. AND VAN DER MEYDEN, R. 2001. A logic for SDSI's linked local named spaces. J. Comput. Secu. 9, 1/2 (Feb./May), 47-74.
19. HERZBERG, A., MASS, Y., MIHAELI, J., NAOR, D., AND RAVID, Y. 2000. Access control meets public key infrastructure, or: Assigning roles to strangers. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp. 2-14.
20. HOWELL, J. R. 2000. Naming and sharing resources acroos administrative boundaries. PhD thesis, Dartmouth College, May 2000.
21. JAJODIA, S., SAMARATI, P., AND SUBRAHMANIAN, V. S. 1997a. A logical language for expressing authorizations. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp. 31-42.
22. JAJODIA, S., SAMARATI, P., SUBRAHMANIAN, V. S., AND BERTTNO, E. 1997b. A unified framework for enforcing multiple access control policies. In Proceedings of ACM SIGMOD International Conference on Management of Data. ACM Press, New York, NY, pp. 474-485.
23. JIM, T. 2001. SD3: A trust management system with certified evaluation. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp. 106-115.
24. KENT, S. T. 1993. Internet privacy enhanced mail. Comm. ACM. 36, 8 (Aug.), 48-60.
25. LAMPSON, B., ABADI, M., BURROWS, M., AND WOBBER, E. 1992. Authentication in distributed systems: theory and practice. ACM Trans. Comput. Systems 10, 4 (Nov.), 265-310.
26. LANGHEINRTCH, M. 2002. A P3P Preference Exchange Language 1.0 (APPEL1.0). W3C Working Draft, April 2002.
27. LI, N. 2000a. Local names in SPKI/SDSI. In Proceedings of the IEEE Computer Security Foundations Workshop (CSFW-13), (July). IEEE Computer Society Press, Los Alamitos, Calif., pp. 2-15.
28. LI, N. 2000b. Delegation Logic: A Logic-based Approach to Distributed Authorization. PhD thesis, New York University, September 2000.
29. LI, N. 2000c. XD1LP: An implementation of D1LP in XSB. http://cs.nyu.edu/ninghui/xd11p/.
30. LI, N., FEIGENBAUM, J., AND GROSOF, B. N. 1999. A logic-based knowledge representation for authorization with delegation (extended abstract). In Proceedings of the IEEE Computer Security Foundations Workshop (CSFW-12) (June). IEEE Computer Society Press, Los Alamitos, Calif., pp. 162-174.
31. LI, N., GROSOF, B. N., AND FEIGENBAUM, J. 2000. A practically implementable and tractable Delegation Logic. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp. 27-42..
32. LI, N., MITCHELL, J. C., AND WINSBOROUGH, W. H. 2002. Design of a role-based trust management framework. In Proceedings of the IEEE Symposium on Security and Privacy (May). EEEE Computer Society Press, Los Alamitos, Calif., pp. 114-130.
33. LI, N., WINSBOROUGH, W. H., AND MITCHELL, J. C. 2003. Distributed credential chain discovery in trust management. J. Comput. Secu. To appear. Extended abstract appeared in Proceedings of the ACM Conference on Computer and Communications Security (Nov, 2001). ACM Press, New York, NY, pp. 156-165.
34. LLOYD, J. W. 1987. Foundations of Logic Programming, 2nd Edition. Springer, Berlin.
35. MARCHIORI, M. 2002. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. W3C Recommendation. April.
36. MAUHER, U. 1997. Modelling a public-key infrastructure. In Proceedings of the European Symposium on Research in Computer Security. Lecture Notes in Computer Science, 1146. Springer, Berlin, pp. 325-350.
37. NAISH, L. 1992. Types and the intended meaning of logic programs. In F. Pfenning, editor, Types in Logic Programming. The MIT Press, Cambridge, Mass., pp. 189-216.
38. PADAWITZ, P. 1998. Computing in Horn Clause Theories. BATCS monographs on Theoretical Computer Science, vol. 16. Springer Berlin.
39. PFENNING, F. ED. 1992. Types in Logic Programming, Logic Programming Series. The MIT Press, Cambridge, Mass.
40. RTVEST, R. L. AND LAMPSON, B. 1996. SDSI: a simple distributed security infrastructure. http://theory.lcs.mit.edu/~rivest/sdsi11.html. October 1996.
41. WEEKS, S. 2001. Understanding trust management systems. In Proceedings of the IEEE Symposium on Security and Privacy (May). IEEE Computer Society Press, Los Alamitos, Calif., pp 94-105.
42. THE XSB RESEARCH GROUP. 2002. The XSB programming system, http://xsb.sourceforge.net/.