A calculus for access control in distributed systems

ABSTRACT

We study some of the concepts, protocols, and algorithms for access control in distributed systems, from a logical perspective. We account for how a principal may come to believe that another principal is making a request, either on his own or on someone else's behalf. We also provide a logical language for accesss control lists and theories for deciding whether requests should be granted.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	Martín Abadi , Gordon D. Plotkin, A logical view of composition, Theoretical Computer Science, v.114 n.1, p.3-30, June 14 1993
	2	Martín Abadi , Michael Burrows , C. Kaufman , Butler W. Lampson, Authentication and Delegation with Smart-cards, Proceedings of the International Conference on Theoretical Aspects of Computer Software, p.326-345, September 24-27, 1991
	3	ANDR~KA, H. Representations of distributive lattice-ordered semigroups with binary relations. Manuscript, Aug. 1989.
	4	BURROWS, M., ABADI, M., AND NEEDHAM, R.M. A logic of authentication. Proceedmgs of the Royal Society of London A 326 (1989), 233-271.
	5	CCITT. CCITT Blue Book, Recommendation X.509 and ISO 9594-8: The directoryauthentication framework. Geneva, March 1988.
	6	Ashok K. Chandra , Dexter C. Kozen , Larry J. Stockmeyer, Alternation, Journal of the ACM (JACM), v.28 n.1, p.114-133, Jan. 1981 [doi>10.1145/322234.322243]
	7	DAM, M. Relevance logic and concurrent computation. In Proceedings of the Thwd IEEE Symposium on Log~e ~n Computer Science (July 1988), 178-185.
	8	NATIONAL BUREAU OF STANDARDS. Data Encryption Standard. Fed. Inform. Processing Standards Pub. 46. Washington D.C , Jan. 1977.
	9	D~Frm, W., AND HELLMAN, M. New directions m cryptography. IEEE Trans. Inf. Theor. IT-22, 6 (Nov. 1976), 644 654.
	10	R. S. Fabry, Capability-based addressing, Communications of the ACM, v.17 n.7, p.403-412, July 1974 [doi>10.1145/361011.361070]
	11	GASSER, M., GOLDSTEIN, A., KAUFMAN, C., AND LAMPSON, B. The Digital Distrihuted System Security Architecture. In Proceedzngs of thc 1989 Natwnal Computer Secumty Conference (Oct. 1989), 305-319.
	12	(~'ASSER, M., AND i\~CDERMOTT, E. An architecture for practical delegation in a distributed system. In Proceedmgs of the 1990 IEEE Symposium on Secumty and Prwacy (May 1990), 20 30
	13	Jean-Yves Girard, Linear logic, Theoretical Computer Science, v.50 n.1, p.1-102, Jan. 30, 1987 [doi>10.1016/0304-3975(87)90045-4]
	14	HUGttES, G E , AND CRESSWELL, NI J An Introduction to Modal Logtc. Methuen, New York, 1968.
	15	KOHL, J., NEUMAN, C., AND STEINER, J. The Kerberos network authentieation service (version 5, draft 3). Available by anonymous FTP from athena-dist.mit.edu, as /pub/doc/kerberos/V5DRAFT3-RFC.{PS,TXT}, Oct. 1990.
	16	KOZEN, D A completeness theorem for Kleene algebras and the algebra of regular events. Cornell TR90-1123, May 1990.
	17	Butler Lampson , Martín Abadi , Michael Burrows , Edward Wobber, Authentication in distributed systems: theory and practice, ACM Transactions on Computer Systems (TOCS), v.10 n.4, p.265-310, Nov. 1992 [doi>10.1145/138873.138874]
	18	Henry M. Levy, Capability-Based Computer Systems, Butterworth-Heinemann, Newton, MA, 1984
	19	MILLEa, S P., NEUMAN, C., SCHILLER, J.I.~ AND SALTZER, J.H. Kerberos authentication and authorization system. In Projcct Athena Techmcal Plan, Section E.2.1, MIT, July 1987.
	20	Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
	21	Vaughan Pratt, Dynamic algebras as a well-behaved fragment of relation algebras, Proceedings of the international conference on cryptology on Algebraic logic and universal algebra in computer science, September 1990, Sydney, Australia
	22	R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
	23	SALTZER, J., AND SCHROEDER, ~/i. The protection of information in computer systems. Proc. IEEE ~3, 9 (Sept. 1975), 1278 1308.
	24	SOLLTNS, K Cascaded authentlcat~on. In Pvoceedmgs of the 1988 IEEE Symposium o~ Securzty and Pr~vacy (April 1988), 156-163.
	25	VICKERS, S. Samson Abramsky on linear process logics. Foundatlon Workshop Notes, Oct - Nov. 1988.
	26	YETTER, D N.Quantales and (noncommutatlve) linear logic. J. Symb Log~e 55, 1 (March 1990), 41 64.