Delegation in distributed systems: Challenges and open issues

Proceedings - International Workshop on Database and Expert Systems Applications, DEXA

Volumn 2003-January, Issue , 2003, Pages 499-503

  Canovas O ^a   Gomez A F ^a  

^a UNIVERSITY OF MURCIA   (Spain)

Author keywords

Access control; Authorization; Conferences; Databases; Expert systems; Failure analysis; Permission; Proposals; Public key; Resource management

Indexed keywords

DATABASE SYSTEMS; EXPERT SYSTEMS; FAILURE ANALYSIS;

AUTHORIZATION; CONFERENCES; PERMISSION; PROPOSALS; PUBLIC KEYS; RESOURCE MANAGEMENT;

ACCESS CONTROL;

EID: 84942787022     PISSN: 15294188     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DEXA.2003.1232073     Document Type: Conference Paper

References (22)

1. T. Aura. Fast access control decisions from delegation certificate databases. In Proceedings of 3rd Australasian Conference on Information Security and Privacy ACISP'98, volume 1428 of Lecture Notes in Computer Science, pages 284-295. Springer, July 1998.
2. T. Aura. On the structure of delegation networks. In Proc. 11th IEEE Computer Security Foundations Workshop, pages 14-26, MA USA, June 1998. IEEE Computer Society Press.
3. T. Aura and C. Ellison. Privacy and Accountability in Certificate Systems. Technical report, Helsinki University of Technology, April 2000. Research Report A61.
4. O. Bandmann, M. Dam, and B. Sadighi. Constrained Delegations. In Proceedings of 2002 IEEE Symposium on Security and Privacy, 2002.
5. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The KeyNote Trust Management System Version 2, September 1999. Request For Comments (RFC) 2704.
6. D. W. Chadwick and A. Otenko. RBAC Policies in XML for X.509 Based Privilege Management. In Proceedings of IFIP SEC 2002, May 2002.
7. O. Cánovas and A. F. Gómez. A Distributed Credential Management System for SPKI-Based Delegation Systems. In Proceedings of 1st Annual PKI Research Workshop, pages 65-76, 2002.
8. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. SPKI certificate theory, September 1999. Request For Comments (RFC) 2693.
9. S. Farrel and R. Housley. An Internet Attribute Certificate Profile for Authorization. Internet Engineering Task Force, April 2002. Request for Comments (RFC) 3281.
10. C. A. Gunter and T. Jim. Policy-directed certificate retrieval. In Proceedings of Software - Practice and Experience, pages 1609-1640, 2000.
11. A. Hagstrom, S. Jajodia, F. Parisi, and D. Wijesekera. Revocation: a classification. In Proceedings of the 14th IEEE Computer Security Foundation Workshop. IEEE Press, 2001.
12. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. In ACM Conference on Computer and Communications Security, pages 156-165, 2001.
13. J. López, A. Maña, E. Pimentel, J. M. Troya, and M. I. Yagüe. Access control infrastructure for digital objects. In Proceedings of ICICS 2002, volume 2513 of Lecture Notes in Computer Science, pages 399-410. Springer, 2002.
14. D. Pinkas and R. Housley. Delegated Path Validation and Delegated Path Discovery Protocol Requirements. Internet Engineering Task Force, May 2002. draft-ietf-pkix-dpv-dpd-req-05.txt.
15. C. Ruan and V. Varadharajan. Resolving conflicts in authorization delegations. In Proceedings of ACISP 2002, volume 2384 of Lecture Notes in Computer Science, pages 271-285. Springer, 2002.
16. B. Sadighi, O. Olsson, and E. Rissanen. Managing authorisations in dynamic coalitions. In Proceedings of CIMI 2003 Conference, 2003.
17. B. Sadighi and M. Sergot. Revocation Schemes for Delegated Authorities. In Proceedings of IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, 2002.
18. B. Sadighi, M. Sergot, and O. Bandmann. Using Authority Certificates to Create Management Structures. In Proceeding of Security Protocols, 9th International Workshop, April 2001.
19. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29(2), February 1996.
20. K. Seamons, M. Winslett, and T. Yu. Limiting the Disclosure of Access Control Policies during Automated Trust Negotiation. In Proceedings of Network and Distributed System Security Symposium, April 2001.
21. M. Thompson, W. Johnston, S. Mudumbai, G. Hoo, K. Jackson, and A. Essiari. Certificate-Based Access Control for Widely Distributed Resources. In Proceedings of the 8th USENIX Security Symposium, pages 215-227, August 1999.
22. J. Vollbrecht, P. Calhoun, S. Farrell, L. Gommans, G. Gross, B. de Bruijn, C. de Laat, M. Holdrege, and D. Spence. AAA Authorization Framework. Request For Comments (RFC) 2904, August 2000.