Implementation aspects of a delegation system

ABSTRACT

In this paper we simulate an authorization and delegation system using knowledge based technology. This proposal is part of a visual tool that is intended to be an implementation of the theoretical model weighted trust graph (WTG). A brief description of WTG Model and its associated tool is included in the text. In essence, the model is based on the inclusion of real numbers between zero and one in certificates to represent the trust level between the entities involved in them. This trust level is used to control delegation. Moreover, attributes from di_erent domains may be interrelated, so attribute delegation is also taken into account. The proposed Simulation Engine supports one directional and bidirectional search algorithms.

REFERENCES

• 1: Tuomas Aura, Fast Access Control Decisions from Delegation Certificate Databases, Proceedings of the Third Australasian Conference on Information Security and Privacy, p.284-295, July 01, 1998
• 2: T. Aura, On the Structure of Delegation Networks, Proceedings of the 11th IEEE workshop on Computer Security Foundations, p.14, June 09-11, 1998
• 3: Tuomas Aura Comparison of graph-search algorithms for authorization verification in delegation networks, In the proceedings of 2nd Nordic Workshop on Secure Computer Systems NORDSEC'97, Espoo, Finland, November 1997.
• 4: Carlos Cotta , José M. Troya, Analyzing Directed Acyclic Graph Recombination, Proceedings of the International Conference, 7th Fuzzy Days on Computational Intelligence, Theory and Applications, p.739-748, October 01-03, 2001
• 5: Isaac Agudo, Javier Lopez and Jose A. Montenegro Graphical Representation of Authorization Policies for Weighted Credentials In 11th Australasian Conference on Information Security and Privacy. (ACISP'06), pp. 383--394. LNCS 4058, Springer. Melbourne, Australia. July 2006.
• 6: Isaac Agudo, Javier Lopez and Jose A. Montenegro. A representation model of trust relationships with delegation extension. In 3rd International Conference on Trust Management, iTrust 2005, volume 3477 of Lecture Notes in Computer Science, pages 116--130. Springer, 2005.
• 7: Chun Ruan , Vijay Varadharajan , Yan Zhang, Logic-Based Reasoning on Delegatable Authorizations, Proceedings of the 13th International Symposium on Foundations of Intelligent Systems, p.185-193, June 27-29, 2002
• 8: Ninghui Li , John C. Mitchell , William H. Winsborough, Design of a Role-Based Trust-Management Framework, Proceedings of the 2002 IEEE Symposium on Security and Privacy, p.114, May 12-15, 2002
• 9: ITU-T X.509, ISI/IEC 9594-8, Information technology - Open Systems Interconnection - The Directory: Public-key and attribute certificate frameworks. 08/2005.
• 10: Isaac Agudo, Javier Lopez, Jose A. Montenegro A Graphical Delegation Solution for X.509 Attribute Certificates ERCIM News. SPECIAL THEME: Security and Trust Management No. 63, Octubre 2005, pp. 33--34. ISSN: 0926--4981
• 11: Jose A. Montenegro, Fernando Moya A practical approach of X509 Attribute Certificate Framework as support to obtain Privilege Delegation 1st European PKI Workshop: Research and Applications. Isla de Samos, Grecia. Junio 2004 LNCS 3093, Springer-Verlag, pp. 160--172. ISBN 3-540-22216-2