An authorization framework based on constrained delegation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3358, Issue , 2004, Pages 845-857

  Yin, Gang ^a   Teng, Meng ^a   Wang, Huai Min ^a   Jia, Yan ^a   Shi, Dian Xi ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHORIZATION; DECENTRALIZED SYSTEMS; POLYNOMIAL APPROXIMATION;

AUTHORIZATION FRAMEWORKS; AUTHORIZATION LANGUAGES; AUTHORIZATION MANAGEMENT; DATALOG; DECENTRALIZED SYSTEM; DELEGATION MODELING; MANAGEMENT LEVEL; NEGATION-AS-FAILURE; ROLE-BASED; TRANSLATION ALGORITHMS; NEGATION AS FAILURES; POLYNOMIAL-TIME;

SEMANTICS;

EID: 33748050831     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30566-8_98     Document Type: Article

References (20)

1. Butler Lampson, Martin Abadi, Michael Burrows, and Edward Wobber. Authentication in distributed systems: Theory and practice. ACM Transactions on Computer Systems, 10(4):265-310, November 1992.
2. B. S. Firozabadi, M. Sergot, and O. Bandmann. Using Authority Certificates to Create Management Structures. In Proceeding of Security Protocols, 9th International Workshop, Cambridge, UK, April 2001. Springer Verlag. In press.
3. C. M. Ellison, B. Frantz, B. Lampson, R. Rivest, B. M. Thomas, and T. Ylonen. SPKI Certificate Theory. IETF RFC 2693, 1998.
4. Ezedin Barka and Ravi Sandhu. Framework for Role-Based Delegation Models. In Proceedings of 16th Annual Computer Security Application Conference, New Orleans, LA, December 11-15 2000, pages 168-176
5. Grid Computing - Making the Global Infrastructure a Reality, Edited by Fran Berman, Geoffery Fox, Tony Hey, John Wiley & Sons Ltd, The Atrium, Southern Gate, Chichester, West Sussex PO19 8SQ, England, 2003
6. Intelligent Systems Laboratory, Swedish Institute of Computer Science, SICStus Prolog User's Manual, Release 3.11.1, February 2004
7. Jonathan S. Shapiro, Jonathan M. Smith, David J. Farber, EROS: a fast capability system, 17th ACM Symposium on Operating Systems Principles (SOSP'99).
8. L. Pearlman, C. Kesselman, V. Welch, I. Foster, S. Tuecke, The Community Authorization Service: Status and Future, CHEP03, March 24-28, 2003, La Jolla, California
9. M. Gasser, E. Mcdermott, An architecture for practical delegation in a distributed system. In Proceedings of the IEEE Symposium on Security and Privacy (May 1990), pp. 20-30.
10. M. Blaze, J. Feigenbaum, John Ioannidis, and Angelos D. Keromytis. The KeyNote trust-management system, version 2. IETF RFC 2704, September 1999.
11. M. Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. The role of trust management in distributed systems. In Secure Internet Programming, volume 1603 of Lecture Notes in Computer Science, pages 185-210. Springer, 1999.
12. Ninghui Li, John C. Mitchell, and William H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
13. Ninghui Li, Benjamin N. Grosof, and Joan Feigenbaum. Delegation logic: A logic-based approach to distributed authorization. ACM Transaction on Information and System Security (TISSEC), February 2003.
14. Olav Bandmann, Mads Damy, Babak Sadighi Firozabadi, Constrained Delegation, Proceedings of the 2002 IEEE Symposium on Security and Privacy (S&P'02)
15. Ravi Sandhu, Venkata Bhamidipati and Qamar Munawer, "The ARBAC97 Model for Role-Based Administration of Roles", ACM Transactions on Information and System Security, Volume 2, Number 1, February 1999, pages 105-135.
16. S. Schwoon, S. Jha, T. Reps, S. Stubblebine, On Generalized Authorization Problems, Proceedings of the 16th IEEE Computer Security Foundations Workshop (CSFW'03)
17. The Common Object Request Broker: Architecture and Specification, Object Management Group, July 2002 Version 3.0
18. Vijay Varadharajan, Philip Allen, Stewart Black. An Analysis of the Proxy Problem in Distributed systems. IEEE Symposium on Research in Security and Privacy. Oakland, CA 1991.
19. Van Gelder, A., Ross, K.A., Schlipf, J.S. The Well-Founded Semantics for General Logic Programs. JACM 38(3): 620-650
20. W. Wulf, E. Cohen, W. Corwin, A. Jones, R. Levin, C. Pierson, and F. Pollack. HYDRA: The kernel of a multiprocessor operating system. Communications of the ACM, 17(6):337-345, June 1974.