Role-based cascaded delegation

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn 9, Issue , 2004, Pages 146-155

  Tamassia, Roberto ^a   Yao, Danfeng ^a   Winsborough, William H ^b  

^a Brown Univerity   (United States)

^b George Mason University   (United States)

Author keywords

Access Control; Delegation; RBAC; Trust Management

Indexed keywords

ALGORITHMS; COMPUTATIONAL METHODS; COMPUTER OPERATING SYSTEMS; CRYPTOGRAPHY; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; INFORMATION MANAGEMENT; MATHEMATICAL MODELS; PUBLIC POLICY; SERVERS; SOCIETIES AND INSTITUTIONS; XML;

ACCESS CONTROL; DELEGATION; RBAC; TRUST MANAGEMENT;

SECURITY OF DATA;

EID: 4143059136     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/990036.990061     Document Type: Conference Paper

References (31)

1. T. Aura. Comparison of graph-search algorithms for authorization verification in delegation networks. In 2nd Nordic Workshop on Secure Computer Systems NORDSEC'97, November 1997.
2. P. S. Barreto, H. Y. Kim, B. Lynn, and M. Scott. Efficient algorithms for pairing-based cryptosystems. In Proceedings of Crypto 2002, volume 2442 of Lectures in Computer Science, pages 354-368. Springer-Verlag, 2002.
3. M. Blaze, J. Feigenbaum, and A. D. Keromytis. KeyNote: Trust management for public-key infrastructures. In Proceedings of Security Protocols International Workshop, 1998.
4. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management, In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 164-173. IEEE Computer Society Press, May 1996.
5. D. Boneh and M. K. Franklin. Identity-based encryption from the Weil pairing. In Advances in Cryptology - CRYPTO 2001, volume 2139 of Lecture Notes in Computer Science, pages 213-229. Springer, 2001.
6. D. Boneh, C. Gentry, B. Lynn, and H. Shacham. Aggregate and verifiably encrypted signatures from bilinear maps. In EUROCRYPT 2003, pages 416-432, 2003.
7. D. Boneh, C. Gentry, B. Lynn, and H. Shacham. A survey of two signature aggregation techniques. CryptoBytes, 6(2), 2003.
8. D. Boneh, B. Lynn, and H. Shacham. Short signatures from the Weil pairing. In Proceedings of Asiacrypt 2001, volume 2248 of Lectures in Computer Science, pages 514-532. Springer-Verlag, 2001.
9. D. Clarke, J.-E. Elien, C. Ellison, M. Fredette, A. Morcos, and R. L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
10. P. Devanbu, M. Gertz, C. Martel, and S. Stubblebine. Authentic third-party data publication. In Fourteenth IFIP 11.3 Conference on Database Security, 2000.
11. Y. Ding, P. Horster, and H. Petersen. A new approach for delegation using hierarchical delegation tokens. In 2nd Int. Conference on Computer and Communications Security, pages 128 - 143. Chapman and Hall, 1996.
12. FIPS 186-2 Digital signature standard, 2000.
13. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Yloenen. Simple public key certificate, http://www.ietf.org/rfc/rfc2693.txt.
14. D. Ferraiolo and R. Kuhn. Role-based access control. In Proceedings of the 15th National Computer Security Conference, 1992.
15. C. Gentry. Certificate-based encryption and the certificate revocation problem. In EUROCRYPT 2003, pages 272-293, 2003.
16. M. T. Goodrich, M. Shin, R. Tamassia, and W. H. Winsborough. Authenticated dictionaries for fresh attribute credentials. In Proc. Trust Management Conference, volume 2692 of LNCS, pages 332-347. Springer, 2003.
17. M. T. Goodrich, R. Tamassia, N. Triandopoulos, and R. Cohen. Authenticated data structures for graph and geometric searching. In Proc. RSA Conference - Cryptographers'Track, pages 295-313. Springer, LNCS 2612, 2003.
18. C. A. Gunter and T. Jim. Policy-directed certificate retrieval. Software: Practice and Experience, 30:1609-1640, September 2000.
19. T. Jim. SD3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 106-115. IEEE Computer Society Press, May 2001.
20. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust-management framework. In Proceedings of IEEE Symposium on Security and Privacy, pages 114-130, 2002.
21. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, February 2003.
22. M. Lorch, S. Proctor, R. Lepro, D. Kafura, and S. Shahi. First experiences using XACML for access control in distributed systems. In Proceedings of the ACM Workshop on XML Security 2003, pages 25-37, October 2003.
23. A. Lysyanskaya, S. Micali, L. Reyzin, and H. Shacham. Sequential aggregate signatures from trapdoor permutations. In Advances in Cryptology -Eurocrypt '04. Available at http://eprint.iacr.org/2003/091/.
24. N. Nagaratnam and D. Lea. Secure delegation for distributed object environments. In Proceedings of the 4th USENIX Conference on Object-Oriented Technologies and Systems (COOTS), April 1998.
25. M. Naor and K. Nissim. Certificate revocation and certificate update. In Proceedings of the 7th USENIX Security Symposium, pages 217-228, 1998.
26. B. C. Neuman. Proxy-based authentication and accounting for distributed systems. In International Conference on Distributed Computing Systems, pages 283-291, 1993.
27. R. Rivest, A. Shamir, and L. Adleman. A method for obtaining digital signatures and public key cryptosystems. Commun. ACM, 21:120-126, 1978.
28. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29, Number 2:38-47, 1996.
29. K. R. Sollins. Cascaded authentication. In Proceedings of 1988 IEEE Symposium on Security and Privacy, pages 156-163, April 1988.
30. V. Varadharajan, P. Allen, and S. Black. An analysis of the proxy problem in distributed systems. In Proceedings of 1991 IEEE Symposium on Security and Privacy, pages 255-275, 1991.
31. XACML. http://www.oasis-open.org/committees/xacml/ and http://sunxacml.sourceforge.net/.