|
 ABSTRACT
We describe a theory of authentication and a system that implements it. Our theory is based on the notion of principal and a “speaks for” relation between principals. A simple principal either has a name or is a communication channel; a compound principal can express an adopted role or delegated authority. The theory shows how to reason about a principal's authority by deducing the other principals that it can speak for; authenticating a channel is one important application. We use the theory to explain many existing and proposed security mechanisms. In particular, we describe the system we have built. It passes principals efficiently as arguments or results of remote procedure calls, and it handles public and shared key encryption, name lookup in a large name space, groups of principals, program loading, delegation, access control, and revocation.
REFERENCES
Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.
| |
1
|
|
 |
2
|
|
| |
3
|
BIRRELL, A., LAMPSON, B., NEEDHAM, R., AND SCHROEDER, M. Global authentication without global trust. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., May 1986), pp. 223-230.
|
| |
4
|
|
| |
5
|
CCITT. Information Processmg Systems -- Open Systems Interconnectmn -- The Directory Authentication Framework. CCITT 1988 Recommendation X.509. Also ISO/IEC 9594-8:1989.
|
| |
6
|
|
| |
7
|
|
| |
8
|
|
| |
9
|
DEPARTMENT OF DEFENSE. Trusted Computer System Evaluation Criteria. DOD 5200.28- STD, 1985.
|
| |
10
|
DIFFIE, W. AND HELLMAN, M. New directions m cryptography. IEEE Trans. Inf. Theor. IT- 22, 6 (Nov. 1976), 644-654.
|
| |
11
|
EBERLE, H. AND THACKER, C. A i Gbit/second GaAs DES chip. In Proceedtngs of the IEEE 1992 Custom Integrated Circuit Conference (Boston, Mass., May 1992), pp. 19.7.1-19.7.4.
|
| |
12
|
GASSER, M., GOLDSTEIN, A., KAUFMAN, C., AND LAMPSON, B. The Digital distributed system security architecture. In Proceedings of the 12th National Computer Securzty Conference (Baltimore, Md., Oct. 1989), pp. 305-319.
|
| |
13
|
GASSER, M., AND MCDERMOTT, E. An architecture for practical delegation in a distributed system. In Proceedtngs of the IEEE Symposium on Securlty and Privacy (Oakland, Calif., May 1990), pp. 20-30.
|
| |
14
|
HERBISON, B. Low cost outboard cryptographic support for SILS and SP4. In Proceedings of the 13th Natwnal Computer Sec~rity Conference (Baltimore, Md., Oct. 1990), pp. 286-295.
|
| |
15
|
KOHL, J., NEUMAN, C., AND STEINER, J The Kerberos network authentication service. Version 5, draft 3, Project Athena, MIT, Cambridge, Mass., Oct. 1990.
|
| |
16
|
|
| |
17
|
LINN, J. Practical authentication for distributed systems. Proceedings of the IEEE Symposium on Security and Privacy (Oakland, Calif., May 1990), pp. 31-40.
|
| |
18
|
NATIONAL BUREAU OF STANDARDS. Data Encryption Standard. FIPS Pub. 46, Jan. 1977.
|
| |
19
|
|
| |
20
|
NEUMAN, C. Proxy-based authorization and accounting for distributed systems. Tech. Rep. 91-02~01, University of Washington, Seattle, Wash., March 1991.
|
| |
21
|
|
| |
22
|
|
| |
23
|
RIVEST, R. AND DUSSE, S. The MD5 Message-DzgestAlgorzthm. Internet Draft {MD5-A}: draft-rsadsi-rivest-md5-01.txt, July 1991.
|
| |
24
|
|
| |
25
|
|
| |
26
|
STEINER, J., NEUMAN, C., AND SCHILLER, J. Kerberos: An authentication service for open network systems. In Proceedings of the Usen~x Winter Conference (Berkeley, Calif., Feb 1988), pp. 191-202.
|
| |
27
|
TARDO, J. AND ALAGAPPAN, K. SPX: Global authentication using public key certificates. Proceedings of the IEEE Symposium on Securzty and Prtvacy (Oakland, Calif., May 1991), pp. 232-244.
|
| |
28
|
|
CITED BY 90
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Martín Abadi , Cédric Fournet , Georges Gonthier, Authentication primitives and their compilation, Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.302-315, January 19-21, 2000, Boston, MA, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Michael K. Reiter , Matthew K. Franklin , John B. Lacy , Rebecca N. Wright, The Ω key management service, Proceedings of the 3rd ACM conference on Computer and communications security, p.38-47, March 14-15, 1996, New Delhi, India
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Stuart G. Stubblebine , Rebecca N. Wright, An authentication logic supporting synchronization, revocation, and recency, Proceedings of the 3rd ACM conference on Computer and communications security, p.95-105, March 14-15, 1996, New Delhi, India
|
|
|
|
|
|
George Coulouris , Jean Dollimore , Marcus Roberts, Role and task-based access control in the PerDiS groupware platform, Proceedings of the third ACM workshop on Role-based access control, p.115-121, October 22-23, 1998, Fairfax, Virginia, United States
|
|
|
|
|
|
|
|
|
|
|
|
Gennady Medvinsky , Charlie Lai , B. Clifford Neuman, Endorsements, licensing, and insurance for distributed system services, Proceedings of the 2nd ACM Conference on Computer and communications security, p.170-175, November 1994, Fairfax, Virginia, United States
|
|
|
|
|
|
|
|
|
David Lie Chandramohan Thekkath , Mark Mitchell , Patrick Lincoln , Dan Boneh , John Mitchell , Mark Horowitz, Architectural support for copy and tamper resistant software, ACM SIGARCH Computer Architecture News, v.28 n.5, p.168-177, Dec. 2000
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Tal Garfinkel , Ben Pfaff , Jim Chow , Mendel Rosenblum , Dan Boneh, Terra: a virtual machine-based platform for trusted computing, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
|
|
|
Michael Kaminsky , George Savvides , David Mazieres , M. Frans Kaashoek, Decentralized user authentication in a global file system, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Dinah McNutt, Role-based System Administration or Who, What, Where, and How, Proceedings of the 7th USENIX conference on System administration, November 01-05, 1993, Monterey, California, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Gang Yin , Huai-min Wang , Dian-xi Shi , Yan Jia , Meng Teng, A rule-based framework for role-based constrained delegation, Proceedings of the 3rd international conference on Information security, November 14-16, 2004, Shanghai, China
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Jacob Y. Levy , Laurent Demailly , John K. Ousterhout , Brent B. Welch, The safe-Tcl security model, Proceedings of the Annual Technical Conference on USENIX Annual Technical Conference, 1998, p.23-23, June 15-19, 1998, New Orleans, Louisiana
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Michael Kaminsky , Eric Peterson , Daniel B. Giffin , Kevin Fu , David Mazières , M. Frans Kaashoek, REX: secure, extensible remote execution, Proceedings of the USENIX Annual Technical Conference 2004 on USENIX Annual Technical Conference, p.16-16, June 27-July 02, 2004, Boston, MA
|
|
|
|
|
|
David Pym , Chris Tofts, Systems Modelling via Resources and Processes: Philosophy, Calculus, Semantics, and Logic, Electronic Notes in Theoretical Computer Science (ENTCS), 172, p.545-587, April, 2007
|
|
|
|
|
|
Thomas Y. C. Woo , Raghuram Bindignavle , Shaowen Su , Simon S. Lam, SNP: an interface for secure network programming, Proceedings of the USENIX Summer 1994 Technical Conference on USENIX Summer 1994 Technical Conference, p.4-4, June 06-10, 1994, Boston, Massachusetts
|
|
|
|
|
|
Isaac Hollander , P. Rajaram , Constantin Tanno, Kerberos on wall street, Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography, p.11-11, July 22-25, 1996, San Jose, California
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Chi-Chao Chang , Grzegorz Czajkowski , Chris Hawblitzel , Deyu Hu , Thorsten von Eicken, Security versus performance tradeoffs in RPC implementations for safe language systems, Proceedings of the 8th ACM SIGOPS European workshop on Support for composing distributed applications, p.158-161, September 1998, Sintra, Portugal
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Byung-Gon Chun , Petros Maniatis , Scott Shenker , John Kubiatowicz, Tiered fault tolerance for long-term integrity, Proccedings of the 7th conference on File and stroage technologies, p.267-282, February 24-27, 2009, San Francisco, California
|
|
|
Marty Humphrey , Sang-Min Park , Jun Feng , Norm Beekwilder , Glenn Wasson , Jason Hogg , Brian LaMacchia , Blair Dillaway, Fine-grained access control for GridFTP using SecPAL, Proceedings of the 8th IEEE/ACM International Conference on Grid Computing, p.217-225, September 19-21, 2007
|
|
|
|
|
|
|
|
|
|
INDEX TERMS
Primary Classification:
D.
Software
D.4
OPERATING SYSTEMS
D.4.6
Security and Protection
Subjects:
Authentication
Additional Classification:
C.
Computer Systems Organization
C.2
COMPUTER-COMMUNICATION NETWORKS
D.
Software
D.4
OPERATING SYSTEMS
D.4.6
Security and Protection
Subjects:
Cryptographic controls;
Access controls
E.
Data
E.3
DATA ENCRYPTION
K.
Computing Milieux
K.6
MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
K.6.5
Security and Protection (D.4.6, K.4.2)
Subjects:
Authentication
General Terms:
Security,
Theory,
Verification
Keywords:
certification authority,
delegation,
group,
interprocess communication,
key distribution,
loading programs,
path name,
principal,
role,
secure channel,
speaks for,
trusted computing base
REVIEW
"Stanley A. Kurzban : Reviewer"
Although the use of distributed systems is growing rapidly, they
have not yet come to dominate conventional business data processing. The
authors usefully address a significant impediment to such domination:
effective access control across dis
more...
|
Adobe Acrobat
QuickTime
Windows Media Player
Real Player
Pdf