SAFE: A Declarative Trust-Agile System with Linked Credentials

Secure Access For Everyone (SAFE), is an integrated system for managing trust

using a logic-based declarative language. Logical trust systems authorize each

request by constructing a proof from a context---a set of authenticated logic

statements representing credentials and policies issued by various principals

in a networked system. A key barrier to practical use of logical trust systems

is the problem of managing proof contexts: identifying, validating, and

assembling the credentials and policies that are relevant to each trust

decision.

SAFE addresses this challenge by (i) proposing a distributed authenticated data

repository for storing the credentials and policies; (ii) introducing a

programmable credential discovery and assembly layer that generates the

appropriate tailored context for a given request. The authenticated data

repository is built upon a scalable key-value store with its contents named by

secure identifiers and certified by the issuing principal. The SAFE language

provides scripting primitives to generate and organize logic sets representing

credentials and policies, materialize the logic sets as certificates, and link

them to reflect delegation patterns in the application. The authorizer fetches

the logic sets on demand, then validates and caches them locally for further

use. Upon each request, the authorizer constructs the tailored proof context

and provides it to the SAFE inference for certified validation.

Delegation-driven credential linking with certified data distribution provides

flexible and dynamic policy control enabling security and trust infrastructure

to be agile, while addressing the perennial problems related to today's

certificate infrastructure: automated credential discovery, scalable

revocation, and issuing credentials without relying on centralized authority.

We envision SAFE as a new foundation for building secure network systems. We

used SAFE to build secure services based on case studies drawn from practice:

(i) a secure name service resolver similar to DNS that resolves a name across

multi-domain federated systems; (ii) a secure proxy shim to delegate access

control decisions in a key-value store; (iii) an authorization module for a

networked infrastructure-as-a-service system with a federated trust structure

(NSF GENI initiative); and (iv) a secure cooperative data analytics service

that adheres to individual secrecy constraints while disclosing the data. We

present empirical evaluation based on these case studies and demonstrate that

SAFE supports a wide range of applications with low overhead.

Psychological and Interpersonal Implications of Believing that Everything is One: Identity, Personality, Values, and Worldviews

For thousands of years, people from a variety of philosophical, religious, spiritual, and scientific perspectives have believed in the fundamental unity of all that exists, and this belief appears to be increasingly prevalent in Western cultures. The present research was the first investigation of the psychological and interpersonal implications of believing in oneness. Self-report measures were developed to assess three distinct variants of the belief in oneness – belief in the fundamental oneness of everything, of all living things, and of humanity – and studies examined how believing in oneness is associated with people’s self-views, attitudes, personality, emotions, and behavior. Using both correlational and experimental approaches, the findings supported the hypothesis that believing in oneness is associated with feeling greater connection and concern for people, nonhuman animals, and the environment, and in being particularly concerned for people and things beyond one’s immediate circle of friends and family. The belief is also associated with experiences in which everything is perceived to be one, and with certain spiritual and esoteric beliefs. Although the three variations of belief in oneness were highly correlated and related to other constructs similarly, they showed evidence of explaining unique variance in conceptually relevant variables. Belief in the oneness of humanity, but not belief in the oneness of living things, uniquely explained variance in prosociality, empathic concern, and compassion for others. In contrast, belief in the oneness of living things, but not belief in oneness of humanity, uniquely explained variance in beliefs and concerns regarding the well-being of nonhuman animals and the environment. The belief in oneness is a meaningful existential belief that is endorsed to varying degrees by a nontrivial portion of the population and that has numerous implications for people’s personal well-being and interactions with people, animals, and the natural world.