Understanding SPKI/SDSI using first-order logic

Proceedings of the Computer Security Foundations Workshop

Volumn 2003-January, Issue , 2003, Pages 89-103

  Li, Ninghui ^a   Mitchell, J C ^a  

^a Stanford University   (United States)

Author keywords

Access control; Algorithm design and analysis; Authorization; Availability; Computer science; Computer security; Data security; Logic; Public key; Safety

Indexed keywords

ACCIDENT PREVENTION; ALGORITHMS; AVAILABILITY; C (PROGRAMMING LANGUAGE); COMPUTATIONAL LINGUISTICS; COMPUTER SCIENCE; FORMAL LOGIC; SECURITY OF DATA; SECURITY SYSTEMS; SEMANTICS;

ALGORITHM DESIGN AND ANALYSIS; AUTHORIZATION; DISTRIBUTED ACCESS CONTROLS; FIRST ORDER LOGIC; LOGIC; PUBLIC KEYS; REWRITING SEMANTICS; ROLE-BASED TRUST MANAGEMENTS;

ACCESS CONTROL;

EID: 33947617835     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.2003.1212707     Document Type: Conference Paper

References (26)

1. Martín Abadi. On SDSI's linked local name spaces. Journal of Computer Security, 6(1-2):3-21, 1998.
2. Martín Abadi, Michael Burrows, Butler Lampson, and Gordon Plotkin. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, October 1993.
3. Olav Bandmann and Mads Dam. A note on SPKI's authorization syntax. In Pre-Proceedings of 1st Annual PKI Research Workshop, April 2002. Available from http://www.cs.dartmouth.edu/~pki02/.
4. Dwaine Clarke, Jean-Emile Elien, Carl Ellison, Matt Fredette, Alexander Morcos, and Ronald L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
5. William F. Dowling and Jean H. Gallier. Linear-time algorithms for testing the satisfiability of propositional horn formulae. Journal of Logic Programming, 1(3):267-284, 1984.
6. Carl Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian Thomas, and Tatu Ylonen. SPKI certificate theory. IETF RFC 2693, September 1999.
7. Carl Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian Thomas, and Tatu Ylonen. Simple public key certificates. Internet Draft (work in progress), July 1999. Available at http://world.std.com/~cme/spki.txt.
8. Joseph Halpern and Ron van der Meyden. A logic for SDSI's linked local name spaces. Journal of Computer Security, 9(1-2):47-74, 2001.
9. Joseph Halpern and Ron van der Meyden. A logic reconstruction of SPKI. In Proceedings of the 14th IEEE Computer Security Foundations Workshop, pages 59-70. IEEE Computer Society Press, June 2001.
10. Jonathan R. Howell. Naming and sharing resources acroos administrative boundaries. PhD thesis, Dartmouth College, May 2000.
11. Jonathan R. Howell and David Kotz. A formal semantics for SPKI. In Proceedings of the Sixth European Symposium on Research in Computer Security (ESORICS 2000), pages 140-158. Springer, October 2000.
12. Somesh Jha and Thomas Reps. Analysis of SPKI/SDSI certificates using model checking. In Proceedings of the 15th IEEE Computer Security Foundations Workshop, pages 129-144. IEEE Computer Society Press, June 2002.
13. Paris C. Kanellakis, Gabriel M. Kuper, and Peter Z. Revesz. Constraint query languages. Journal of Computer and System Sciences, 51(1):26-52, August 1995.
14. Gabriel Kuper, Leonid Libkin, and Jan Paredaens, editors. Constraint Databases. Springer, 2000.
15. Butler Lampson, Martín Abadi, Michael Burrows, and Edward Wobber. Authentication in distributed systems: Theory and practice. ACM Transactions on Computer Systems, 10(4):265-310, November 1992.
16. Ninghui Li. Local names in SPKI/SDSI. In Proceedings of the 13th IEEE Computer Security Foundations Workshop, pages 2-15. IEEE Computer Society Press, July 2000.
17. Ninghui Li, Benjamin N. Grosof, and Joan Feigenbaum. Delegation Logic: A logic-based approach to distributed authorization. ACM Transaction on Information and System Security (TISSEC), 6(1):128-171, February 2003.
18. Ninghui Li and John C. Mitchell. Datalog with constraints: A foundation for trust management languages. In Proceedings of the Fifth International Symposium on Practical Aspects of Declarative Languages (PADL 2003), pages 58-73. Springer, January 2003.
19. Ninghui Li, John C. Mitchell, Yu Qiu, William H. Winsborough, Kent E. Seamons, Michael Halcrow, and Jared Jacobson. RTML: A Role-based Trust-management Markup Language, August 2002. Unpublished manuscript. Available at http://crypto.stanford.edu/~ninghui/papers/rtml.pdf.
20. Ninghui Li, John C. Mitchell, and William H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May2002.
21. Ninghui Li, William H. Winsborough, and John C. Mitchell. Beyond proof-of-compliance: Safety and availability analysis in trust management. In Proceedings of IEEE Symposium on Security and Privacy, May 2003. To appear.
22. Ninghui Li, William H. Winsborough, and John C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, February 2003.
23. John W. Lloyd.Foundations of Logic Programming, Second Edition. Springer, 1987.
24. Dale Miller, Gopalan Nadathur, Frank Pfenning, and Andre Scedrov. Uniform Proofs as a Foundation for Logic Programming, volume 51 of Annals of Pure and Applied Logic, pages 125-157. Elsevier Science, 1991.
25. Gopalan Nadathur. Correspondences between classical, intuitionistic and uniform provability. Theoretical Computer Science, 232(1-2):273-298, 2000.
26. Ronald L. Rivest and Bulter Lampson. SDSI - a simple distributed security infrastructure, October 1996. Available at http://theory.lcs.mit.edu/~rivest/sdsi11.html.