Regulated delegation in distributed systems

Xuhui Ao, Ask Jeeves, Naftaly H. Minsky

Research output: Chapter in Book/Report/Conference proceedingConference contribution

3 Scopus citations

Abstract

Certificate-based delegation (CBD) is a prominent element of distributed access control, providing it with flexibility and scalability. But despite its elegance and effectiveness, CBD has inherent limitations that restrict its applicability. These limitations include, among others: lack of support for non-monotonic policies, such as separation of duties; the inability to support the transfer of privileges, where the delegator loses the privilege it delegates; and the lack of support for quotas, i.e., restrictions on the number of time a given privilege can be exercised. This paper describes an approach to the distributed delegation, which shares much of the flexibility and scalability of CBD, but is not encumbered by its limitations. This approach is based on the decentralized control mechanism called law-governed interaction (LGI), which is used to regulate the process of delegation itself.

Original languageEnglish (US)
Title of host publicationProceedings - Thirteenth International Symposium on Temporal Representation and Reasoning, TIME 2006
PublisherIEEE Computer Society
Pages215-223
Number of pages9
ISBN (Print)0769525989, 9780769525983
DOIs
StatePublished - 2006
Event7th IEEE International Workshop on Policies for Distributed Systems and Networks, Policy 2006 - London, ON, Canada
Duration: Jun 5 2006Jun 7 2006

Publication series

NameProceedings - Seventh IEEE International Workshop on Policies for Distributed Systems and Networks, Policy 2006
Volume2006

Other

Other7th IEEE International Workshop on Policies for Distributed Systems and Networks, Policy 2006
Country/TerritoryCanada
CityLondon, ON
Period6/5/066/7/06

All Science Journal Classification (ASJC) codes

  • Engineering(all)

Fingerprint

Dive into the research topics of 'Regulated delegation in distributed systems'. Together they form a unique fingerprint.

Cite this