Endorsements, licensing, and insurance for distributed system services

ABSTRACT

Clients in a distributed system place their confidence in many servers, and servers themselves rely on other servers for file storage, authentication, authorization, and payment. When a system spans administrative boundaries it becomes harder to assess the security and competence of potential service providers. This paper examines the issue of confidence in large distributed systems.When confidence is lacking in the “real world,” one relies on endorsements, licensing, insurance, and surety bonds to compensate. We show that by incorporating such assurances into a distributed system, users are better able to evaluate the risks incurred when using a particular server. This paper describes a method to electronically represent endorsements, licenses, and insurance policies, and discusses the means by which clients use such items when selecting service providers.

REFERENCES

• 1: Andrew D. Birrell, Butler W. Lampson, Roger M. Needham, and Michael D. Schroeder. A global authentication service without global trust. In Proceedings of the IEEE SympoJium on Securit~l and Pri~acy, pages 223-230, April 1986.
• 2: D. Chaum , A. Fiat , M. Naor, Untraceable electronic cash, Proceedings on Advances in cryptology, p.319-327, February 1990, Santa Barbara, California, United States
• 3: Virgil D. Gligor , Shyh-Wei Luan , Joseph N. Pato, On Inter-RealmAuthentication in Large Distributed Systems, Proceedings of the 1992 IEEE Symposium on Security and Privacy, p.2, May 04-06, 1992
• 4: Butler Lampson , Martín Abadi , Michael Burrows , Edward Wobber, Authentication in distributed systems: theory and practice, ACM Transactions on Computer Systems (TOCS), v.10 n.4, p.265-310, Nov. 1992 [doi>10.1145/138873.138874]
• 5: Rowland H. Long. The Law of Liability Insurance, volume 1 and 2, pages 1.2-13.7. Mathew Bender and Company, Inc., Oakland, California, 1992.
• 6: Gennady Medvinsky , Clifford Neuman, NetCash: a design for practical electronic currency on the Internet, Proceedings of the 1st ACM conference on Computer and communications security, p.102-106, November 03-05, 1993, Fairfax, Virginia, United States [doi>10.1145/168588.168601]
• 7: B. Clifford Neuman, Protection and Security Issues for Future Systems, Proceedings of the International Workshop on Operating Systems of the 90s and Beyond, p.184-201, July 08-12, 1991
• 8: B. Clifford Neuman. Proxy-based authorization and accounting for distributed systems. In Proceedings of the l$th International ConJerence on Distributed Computing Sltstems, pages 283-291, May 1993.
• 9: B. Clifford Neuman, Steven Seger Augart, and Shantaprasad Upasani. Using prospero to support integrated locationindependent computing. In Proceedings o.f the Useniz Sllmposlum on Mobile and Location.Independent Computing, August 1993.
• 10: B. Clifford Neuman and Theodore Ts'o. Kerberos: An authentication service for computer networks. IEEE Communications, 32(9), September 1994.
• 11: David Porter. Fundamentals o} Bonding, a Manual o} Fidelity and Surety, pages 9-11. The Rough Notes Co., Inc., Indianapolis, Indiana, 1970.
• 12: Joseph J. Tardo and Kannan Alagappan. SPX: Global authentication using public key certificates. In Proceedings of the IEEE Symposium on Security and P~i~~c~, May 1991.
• 13: Philip Ziinmermann. PGP User's Guide, volume 1 and 2. 1994. Distributed with PGP 2.6.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.4 Systems
          Subjects: Distributed databases

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS

General Terms:
Theory, Verification