Distributed access-rights management with delegation certificates

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1603, Issue , 1999, Pages 211-235

  Aura, Tuomas ^a  

^a AALTO UNIVERSITY   (Finland)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; DISTRIBUTED COMPUTER SYSTEMS;

ACCESS RIGHTS; ACCESS RIGHTS MANAGEMENT; DISCRETIONARY ACCESS CONTROL; PUBLIC KEY CERTIFICATES;

OBJECT ORIENTED PROGRAMMING;

EID: 84982994153     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-48749-2_9     Document Type: Conference Paper

References (26)

1. Martin Abadi. On SDSI's linked local name spaces. In Proc. 10th IEEE Computer Security Foundations Workshop, pages 98-108, Rockport, MA, June 1997. IEEE Computer Society Press.
2. Martin Abadi, Michael Burrows, Butler Lampson, and Gordon Plotkin. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, September 1993.
3. Tuomas Aura. Fast access control decisions from delegation certificate databases. In Proc. 3rd Australasian Conference on Information Security and Privacy ACISP '98, volume 1438 of LNCS, pages 284-295, Brisbane, Australia, July 1998. Springer Verlag.
4. Tuomas Aura. On the structure of delegation networks. In Proc. 11th IEEE Computer Security Foundations Workshop, pages 14-26, Rockport, MA, June 1998. IEEE Computer Society Press.
5. Tuomas Aura and Dieter GoUmann. Software license management with smart cards. In Proc. USENIX Workshop on Smartcard Technology, Chicago, May 1999. USENIX Association.
6. Tuomas Aura, Petteri Koponen, and Juhana Rasanen. Delegation-based access control for intelligent network services. In Proc. ECOOP Workshop on Distributed Object Security, Brussels, Belgium, July 1998.
7. D. Elhott Bell and Leonard. J. LaPadula. Secure computer systems: Unified exposition and Multics interpretation. Technical Report ESD-TR-75-306, The Mitre Corporation, Bedford MA, USA, March 1976.
8. Matt Blaze, Joan Feigenbaum, John loannidis, and Angelos D. Keromytis. The role of trust management in distributed systems security. In J. Vitek and C. Jensen, editors. Secure Internet Programming: Security Issues for Distributed and Mobile Objects, LNCS. Springer-Verlag Inc, New York, NY, USA, 1999.
9. Matt Blaze, Joan Feigenbaum, and Jack Lacy. Decentralized trust management. In Proc. 1996 IEEE Symposium on Security and Privacy, pages 164-173, Oakland, CA, May 1996. IEEE Computer Society Press.
10. Matt Blaze, Joan Feigenbaum, and Martin Strauss. Compliance checking in the PolicyMaker trust management system. In Proc. Financial Cryptography 98, volume 1465 of LNCS, pages 254-271, Anguilla, February 1998. Springer.
11. David F. Brewer and Michael J. Nash. The Chinese wall security policy. In Proc. IEEE Symposium on Research in Security and Privacy, pages 206-214, Oakland, CA, May 1989. IEEE Computer Society Press.
12. Recommendation X.509, The Directory-Authentication Framework, volume VIII of CCITT Blue Book, pages 48-81. CCITT, 1988.
13. CaxI M. Ellison. Establishing identity without certification authorities. In Proc. 6th USENIX Security Symposium, pages 67-76, San Jose, CA, July 1996. USENIX Association.
14. Carl M. Ellison, Bill Franz, Butler Lampson, Ron Rivest, Brian M. Thomas, and Tatu Ylonen. SPKI certificate theory, Simple public key certificate, SPKI examples. Internet draft, IETF SPKI Working Group, November 1997.
15. Carl M. Ellison, Bill Franz, Butler Lampson, Ron Rivest, Brian M. Thomas, and Tatu Ylonen. SPKI certificate theory. Internet draft, IETF SPKI Working Group, October 1998.
16. M. Gasser, A. Goldstein, C. Kaufman, and B. Lampson. The digital distributed system security architecture. In Proc. National computer security conference, pages 305-319, Baltimore, MD, USA, October 1989.
17. Li Gong. A secure identity-based capability system. In Proc. 1989 IEEE Symposium on Research in Security and Privacy, pages 56-63, Oakland, CA, May 1989. IEEE, IEEE Computer Society Press.
18. J. Kohl and C. Neuman. The Kerberos network authentication service (V5). RFC 1510, IETF Network Working Group, September 1993.
19. Petteri Koponen, Juhana Rasanen, and OUi Martikainen. Calypso service architecture for broadband networks. In Proc. IFIP TC6 WG6.7 International Conference on Intelligent Networks and Intelligence in Networks. Chapman & Hall, September 1997.
20. Ilari Lehti and Pekka Nikander. Certifying trust. In Proc. First International Workshop on Practice and Theory in Public Key Cryptography PKC'98, volume 1431 of LNCS, Yokohama, Japan, February 1998. Springer.
21. Nataraj Nagaiatnam and Doug Lea. Secure delegation for distributed object environments. In Proc. 4th USENIX Conference on Object-Oriented Technologies and Systems (COOTS), pages 101-115, Santa Fe, NM, April 1998. USENIX Association.
22. A guide to understanding discretionary access control in trusted systems. Technical Report NCSC-TG-003 version-1, National Computer Security Center, September 1987.
23. Pekka Nikander and Lea Viljanen. Storing and retrieving Internet certificates. In Proc. 3rd Nordic Workshop on Secure IT Systems NORDSEC'98, Trondheim, Norway, November 1998.
24. Ronald L. Rivest and Butler Lampson. SDSI — A simple distributed security infrastucture. Technical report, April 1996.
25. Edward P. Wobber, Maiti'n Abadi, Michael Burrows, and Butler Lampson. Authentication in the Taos operating system. ACM Transactions on Computer Systems, 12(l):3-32, February 1994.
26. Philip Zimmermann. The Official PGP User's Guide. MIT Press, June 1995.