Using first-order logic to reason about policies

ACM Transactions on Information and System Security

Volumn 11, Issue 4, 2008, Pages

  Halpern, Joseph Y ^a   Weissman, Vicky ^a  

^a Cornell University ^*  (United States)

Author keywords

Digital rights management

Indexed keywords

DIGITAL RIGHTS MANAGEMENT; FIRST-ORDER LOGIC;

INFORMATION THEORY;

FORMAL LOGIC;

EID: 49449088504     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/1380564.1380569     Document Type: Article

References (48)

1. ABADI, M., BURROWS, M., LAMPSON, B., AND PLOTKIN, G. D. 1993. A calculus for access control in distributed systems. ACM Trans. Program. Lang. Syst. 15, 4, 706-734.
2. APPEL, A. W. AND FELTEN, E. W. 1999. Proof-carrying authentication. In Proceedings of the ACM Conference on Computer and Communications Security (CCS'99). 52-62.
3. APPLE COMPUTER, I. 2004. iTunes: Terms of sale. Available at http://www.apple.com/support/itunes/legal/policies.html.
4. BECKER, M. Y. AND SEWELL, P. 2004. Cassandra: Flexible trust management, applied to electronic health records. In Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW'04). 139-154.
5. BERTINO, E., BETTINI, C., FERRARI, E., AND SAMARATI, P. 1998. An access control model supporting periodicity constraints and temporal reasoning. ACM Trans. Database Syst. 23, 3, 231-285.
6. BLAZE, M., FEIGENBAUM, J., IOANNIDIS, J., AND KEROMYTIS, A. 1998. The KeyNote trust management system. Available at http://www.cis.upenn.edu/~angelos/keynote.html.
7. BLAZE, M., FEIGENBAUM, J., AND LACY, J. 1996. Decentralized trust management. In Proceedings of the 1996 IEEE Symposium on Security and Privacy (SP'96). 164-173.
8. BLAZE, M., FEIGENBAUM, J., AND STRAUSS, M. 1998. Compliance checking in the PolicyMaker trust management system. In Proceedings of Financial Cryptography (FC'98) 1998. 254-274.
9. BÖRGER, E., GRÄDEL, E., AND GUREVICH, Y. 1997. The Classical Decision Problem. Perspectives of Mathematical Logic. Springer-Verlag, Berlin, Germany. 2nd printing (Universitext) 2001.
10. BRAND, D. 1975. Proving theorems with the modification method. SIAM J. Comput. 4, 4, 412-430.
11. CHOMICKI, J., LOBO, J., AND NAQVI, S. 2000. A logic programming approach to conflict resolution in policy management. In Principles of Knowledge Representation and Reasoning: Proceedings of the 9th International Conference (KR'00). 121-132.
12. CONTENTGUARD. 2001. XrML: The digital rights language for trusted content and services. Available at http://www.xrml.org/.
13. DETREVILLE, J. 2002. Binder, a logic-based security language. In Proceedings of the 2002 IEEE Symposium on Security and Privacy (SP'02). 95-103.
14. ELLISON, C., FRANTZ, B., LAMPSON, B., RIVEST, R., THOMAS, B., AND YLONEN, T. 1999a. Simple public key certificate. Available at http://world.std.com/~cme/ spki.txt. Internet RFC 2693.
15. ELLISON, C., FRANTZ, B., LAMPSON, B., RIVEST, R., THOMAS, B., AND YLONEN, T. 1999b. SPKI certificate theory. Available at http://www.ietf.org/html.charters/ spki-charter.html. Internet RFC 2693.
16. ENDERTON, H. B. 1972. A Mathematical Introduction to Logic. Academic Press, New York.
17. FERRAIOLO, D., BARKLEY, J., AND KUHN, D. 1999. A role based access control model and reference implementation within a corporate intranet. ACM Trans. Inform. Syst. Secur. 1, 2, 34-64.
18. GARCIA-MOLINA, H., ULLMAN, J. D., AND WIDOM, J. 2002. Database Systems: The Complete Book. Prentice Hall, New Jersey.
19. GLASGOW, J., MACEWEN, G., AND PANANGADEN, P. 1992. A logic for reasoning about security. ACM Trans. Comput. Syst. 10, 3, 226-264.
20. GRIFFITHS, P. AND WADE, B. 1976. An authorization mechanism for a relational database system. ACM Trans. Database Syst. 1, 3, 242-255.
21. HALFERN, J. Y. AND VAN DER MEYDEN, R. 2003. A logical reconstruction of SPKI. J. Comput. Secur. 11, 4, 581-614.
22. HALPERN, J. Y., VAN DER MEYDEN, R., AND SCHNEIDER, F. 1999. Logical foundations for trust management. Unpublished manuscript.
23. HALPERN, J. Y. AND WEISSMAN, V. 2003. Using first-order logic to reason about policies. In Proceedings of the 16th IEEE Computer Security Foundations Workshop (CSFW'03). 187-201.
24. HALPERN, J. Y. AND WEISSMAN, V. 2008. A formal foundation for XrML. J. ACM 55, 1.
25. HITCHENS, M. AND VARADHARAJAN, V. 2001. Tower: A language for role based access control. In Proceedings of the International Workshop of Policies for Distributed Systems and Networks (POLICY'00). 88-106.
26. IANNELLA, R. 2001. ODRL: The open digital rights language initiative. Available at http://odrl.net/.
27. IOANNIDIS, Y. AND SELLIS, T. 1992. Supporting inconsistent rules in database systems. J. Intell. Inform. Syst. 1, 3/4, 243-270.
28. JAJODIA, S., SAMARATI, P., SAPINO, M. L., AND SUBRAHMANIAN, V. 2001. Flexible support for multiple access control policies. ACM Trans. Database Syst. 26, 2, 214-260.
29. JIM, T. 2001. Sd3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy (SP'01). 106-115.
30. LAMPSON, B., ABADI, M., BURROWS, M., AND WOBBER, E. 1992. Authentication in distributed systems: Theory and practice. ACM Trans. Comput. Syst. 10, 4, 265-310.
31. LI, N., GROSOF, B. N., AND FEIGENBAUM, J. 2003. Delegation logic: A logic-based approach to distributed authorization. ACM Trans. Inf. Syst. Secur. 6, 1, 128-171.
32. LI, N. AND MITCHELL, J. C. 2003. Datalog with constraints: A foundation for trust management languages. In Proceedings of the 5th International Symposium on Practical Aspects of Declarative Languages (PADL'03). 58-73.
33. LI, N. AND MITCHELL, J. C. 2006. Understanding spki/sdsi using first-order logic. Int. J. Inform. Secur. 5, 1, 48-64.
34. LI, N., MITCHELL, J. C., AND WINSBOROUGH, W. H. 2002. Design of a role-based trustmanagement framework. In Proceedings of the IEEE Symposium on Security and Privacy (SP'02). 114-130.
35. MICROSOFT. 2003. Information rights management in Office Professional Edition 2003. Available at http://www.microsoft.com/office/ editions/prodinfo/technologies/irm.mspx.
36. MOSES, T. 2005. XACML: The Extensible Access Control Markup Language, version 2.0. Available at http://www.xacml.org.
37. MPEG. 2004. Information technology - Multimedia framework (MPEG-21) - Part 5: Rights Expression Language (ISO/IEC 21000-5:2004). Available at http://www.iso.ch/iso/en/.
38. NELSON, G. AND OPPEN, D. C. 1980. Fast decision procedures based on congruence closure. JACM 27, 2, 356-364.
39. NERODE, A. AND SHORE, R. 1997. Logic for Applications, 2nd ed. Springer-Verlag, New York.
40. PFLEEGER, C. P. 1997. Security in Computing. Prentice Hall, New Jersey.
41. PUCELLA, R. AND WEISSMAN, V. 2004. A formal foundation for ODRL rights. In Workshop on Issues in the Theory of Security (WITS'04).
42. RIVEST, R. AND LAMPSON, B. 1996. SDSI - A simple distributed security infrastructure. Available at http://theory.lcs.mit. edu/~cis/sdsi.html.
43. ROBINSON, G. AND WOS, L. 1983. Paramodulation and theorem-proving in first-order theories with equality. In Automation of Reasoning 2: Classical Papers on Computational Logic 1967-1970, J. Siekmann and G. Wrightson, Eds. Springer, Berlin, Heidelberg, 298-313.
44. SANDHU, R. S., COYNE, E. J., FEINSTEIN, H. L., AND YOUMAN, C. E. 1996. Role-based access control models. IEEE Comput. 29, 2, 38-47.
45. SLEATOR, D. AND TARJAN, R. 1983. A data structure for dynamic trees. J. Comput. Syst. Sci. 26, 3, 362-391.
46. STOCKMEYER, L. J. 1977. The polynomial-time hierarchy. Theor. Comput. Sci. 3, 1-22.
47. WEISSMAN, V. AND LAGOZE, C. 2004. Towards a policy language for humans and computers. In Proceedings of the 8th European Conference on Digital Libraries (ECDL'04). 513-525.
48. WRIGHT, G. H. V. 1951. An Essay in Modal Logic. North-Holland, Amsterdam.