PeerAccess: a logic for distributed authorization Export

@inproceedings{citeulike:1455260, abstract = {This paper introduces the PeerAccess framework for reasoning about authorization in open distributed systems, and shows how a parameterization of the framework can be used to reason about access to computational resources in a grid environment. The PeerAccess framework supports a declarative description of the behavior of peers that selectively push and/or pull information from certain other peers. PeerAccess local knowledge bases encode the basic knowledge of each peer (e.g., Alice's group memberships), its policies governing the release of each possible piece of information to other peers, and information that guides and limits its search process when trying to obtain particular pieces of information from other peers. PeerAccess proofs of authorization are verifiable and nonrepudiable, and their construction relies only on the local information possessed by peers and their parameterized behavior with respect to query answering, information push/pull, and information release policies (i.e., no omniscient viewpoint is required). We present the PeerAccess language and peer knowledge base structure, the associated formal semantics and proof theory, and examples of the use of PeerAccess in constructing proofs of authorization to access computational resources.}, address = {New York, NY, USA}, author = {Winslett, Marianne and Zhang, Charles C. and Bonatti, Piero A.}, booktitle = {CCS '05: Proceedings of the 12th ACM conference on Computer and communications security}, citeulike-article-id = {1455260}, citeulike-linkout-0 = {http://portal.acm.org/citation.cfm?id=1102120.1102144}, citeulike-linkout-1 = {http://dx.doi.org/10.1145/1102120.1102144}, doi = {10.1145/1102120.1102144}, isbn = {1-59593-226-7}, keywords = {access, authorization, control, distributed}, location = {Alexandria, VA, USA}, pages = {168--179}, posted-at = {2007-07-13 23:54:36}, priority = {2}, publisher = {ACM}, title = {PeerAccess: a logic for distributed authorization}, url = {http://dx.doi.org/10.1145/1102120.1102144}, year = {2005} }

TY - CONF ID - citeulike:1455260 L3 - citeulike-article-id:1455260 N2 - This paper introduces the PeerAccess framework for reasoning about authorization in open distributed systems, and shows how a parameterization of the framework can be used to reason about access to computational resources in a grid environment. The PeerAccess framework supports a declarative description of the behavior of peers that selectively push and/or pull information from certain other peers. PeerAccess local knowledge bases encode the basic knowledge of each peer (e.g., Alice's group memberships), its policies governing the release of each possible piece of information to other peers, and information that guides and limits its search process when trying to obtain particular pieces of information from other peers. PeerAccess proofs of authorization are verifiable and nonrepudiable, and their construction relies only on the local information possessed by peers and their parameterized behavior with respect to query answering, information push/pull, and information release policies (i.e., no omniscient viewpoint is required). We present the PeerAccess language and peer knowledge base structure, the associated formal semantics and proof theory, and examples of the use of PeerAccess in constructing proofs of authorization to access computational resources. CY - Alexandria, VA, USA SN - 1-59593-226-7 AD - New York, NY, USA EP - 179 TI - PeerAccess: a logic for distributed authorization PB - ACM T2 - CCS '05: Proceedings of the 12th ACM conference on Computer and communications security SP - 168 KW - access KW - authorization KW - control KW - distributed AU - Winslett, Marianne AU - Zhang, Charles AU - Bonatti, Piero PY - 2005/// UR - http://dx.doi.org/10.1145/1102120.1102144 ER -