PeerAceess: A logic for distributed authorization

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2005, Pages 168-179

  Winslett, M ^a   Zhang, Charles C ^a   Bonatti, Piero A ^b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

Distributed authorization; Logical signature; P2p systems; Proof hints; Release policies; Sticky policies

Indexed keywords

COMPUTATIONAL METHODS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; KNOWLEDGE BASED SYSTEMS; OPEN SYSTEMS; PARAMETER ESTIMATION; RESOURCE ALLOCATION; SEMANTICS;

DISTRIBUTED AUTHORIZATION; LOGICAL SIGNATURE; P2P SYSTEMS; PROOF HINTS; RELEASE POLICIES; STICKY POLICIES;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33745792729     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1102120.1102144     Document Type: Conference Paper

References (25)

1. J. Basney, W. Nejdl, D. Olmedilla, V. Welch, and M. Winslett. Negotiating trust on the Grid. In 2nd Workshop on Semantics in P2P and Grid Computing, New York, 2004.
2. L. Bauer, S. Garriss, and M. K. Reiter. Distributed proving in access-control systems. In Proceedings of the IEEE Symposium on Security and Privacy, Berkeley, May 2005.
3. M. Y. Becker and P. Sewell. Cassandra: distributed access control policies with tunable expressiveness. In 5th IEEE International Workshop on Policies for Distributed Systems and Networks, Yorktown Heights, June 2004.
4. M. Y. Becker and P. Sewell. Cassandra: flexible trust management, applied to electronic health records. In IEEE Computer Security Foundations Workshop, 2004.
5. M. Blaze, J. Feigenbaum, and A. D. Keromytis. KeyNote: Trust management for public-key infrastructures (position paper). Lect. Notes in Computer Science, 1550:59-63, 1999.
6. P. Bonatti and P. Samarati. Regulating Service Access and Information Release on the Web. In Conference on Computer and Communications Security, Athens, Nov. 2000.
7. P. A. Bonatti and D. Olmedilla. Driving and monitoring provisional trust negotiation with metapolicies. In Workshop on Policies for Distributed Systems and Networks, 2005.
8. M. Burrows, M. Abadi, and R. Needham. A logic of authentication. ACM Trans. on Comp. Systems, 8(1), 1990.
9. J. Camenisch and E. V. Herreweghen. Design and implementation of the idemix anonymous credential system. In Computer and Communications Security, 2002.
10. R. Gavriloaie, W. Nejdl, D. Olmedilla, K. Seamons, and M. Winslett. No registration needed: How to use declarative policies and negotiation to access sensitive resources on the semantic web. In European Semantic Web Symposium, 2004.
11. A. Herzberg, Y. Mass, J. Michaeli, D. Naor, and Y. Ravid. Access control meets public key infrastructure, or: assigning roles to strangers. In Symp. on Security and Privacy, 2000.
12. A. Hess, J. Jacobson, H. Mills, R. Wamsley, K. E. Seamons, and B. Smith. Advanced client/server authentication in TLS. In Network and Dist. Systems Security Symp., 2002.
13. T. Jim. SD3: A trust management system with certified evaluation. In IEEE Symp. on Security and Privacy, 2001.
14. T. Jim and D. Suciu. Dynamically distributed query evaluation. In Principles of Database Systems, 2001.
15. G. Karjoth, M. Schunter, and M. Waidner. Platform for enterprise privacy practices: Privacy-enabled management of customer data. In Workshop on Privacy Enhancing Technologies, 2002.
16. H. Koshutanski and F. Massacci. Interactive trust management and negotiation scheme. In Workshop on Formal Aspects in Security and Trust, Aug. 2004.
17. N. Li and J. Mitchell. RT: A role-based trust-management framework. In Third DARPA Information Survivability Conference and Exposition, Apr. 2003.
18. N. Li, W. Winsborough, and J. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1), Feb. 2003.
19. L. Pearlman, V. Welch, I. Foster, C. Kesselman, and C. Tuecke. A community authorization service for group collaboration. In Workshop on Policies for Distributed Systems and Networks, 2002.
20. B. Pfitzmann and M. Waidner. Federated identity-management protocols-where user authentication protocols may go. In 11th Cambridge International Workshop on Security Protocols, Apr. 2003.
21. C. Ruan, V. Varadharajan, and Y. Zhang. Logic-based reasoning on delegatable authorizations. In Foundations of Intelligent Systems, ISMIS 2002, Lyon, June 2002.
22. S. Staab, B. Bhargava, L. Lilien, A. Rosenthal, M. Winslett, M. Sloman, T. S. Dillon, E. Chang, F. K. Hussain, W. Nejdl, D. Olmedilla, and V. Kashyap. The pudding of trust. IEEE Intelligent Systems, 19(5):74-88, Sep./Oct. 2004.
23. L. Wang, D. Wijesekera, and S. Jajodia. A logic-based framework for attribute based access control. In Workshop on Formal Methods in Security Engineering, Oct. 2004.
24. M. Winslett, T. Yu, K. E. Seamons, A. Hess, J. Jacobson, R. Jarvis, B. Smith, and L. Yu. The TrustBuilder architecture for trust negotiation. IEEE Internet Computing, 6(6), 2002.
25. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Trans. on Info. and System Security, 6(1), 2003.