Delegation constraint management


Autoria(s): Pham, Quan; Reid, Jason F.; Dawson, Edward
Data(s)

2010

Resumo

The paper addresses the issue of providing access control via delegation and constraint management across multiple security domains. Specifically, this paper proposes a novel Delegation Constraint Management model to manage and enforce delegation constraints across security domains. An algorithm to trace the authority of delegation constraints is introduced as well as an algorithm to form a delegation constraint set and detect/prevent potential conflicts. The algorithms and the management model are built upon a set of formal definitions of delegation constraints. In addition, a constraint profile based on XACML is proposed as a means to express the delegation constraint. The paper also includes a protocol to exchange delegation constraints (in the form of user commitments) between the involved entities in the delegation process.

Formato

application/pdf

application/pdf

Identificador

http://eprints.qut.edu.au/39769/

Publicador

Technical Report: Information Security Institute, Queensland University of Technology

Relação

http://eprints.qut.edu.au/39769/1/COVERSHEET_C39769.pdf

http://eprints.qut.edu.au/39769/3/DelegationConstraintManagement.pdf

Pham, Quan, Reid, Jason F., & Dawson, Edward (2010) Delegation constraint management. Technical Report: Information Security Institute, Queensland University of Technology.

Direitos

Copyright 2010 The Authors

Fonte

Faculty of Science and Technology; Information Security Institute

Palavras-Chave #080303 Computer System Security #Delegation #Constraint management #Constraint profile #XACML #Access control #Distributed systems
Tipo

Report