NDLI: Constraining Credential Usage in Logic-Based Access Control

Content Provider	IEEE Xplore Digital Library
Author	Bauer, L. Limin Jia Sharma, D.
Copyright Year	2010
Abstract	Authorization logics allow concise specification of flexible access-control policies, and are the basis for logic-based access-control systems. In such systems, resource owners issue credentials to specify policies, and the consequences of these policies are derived using logical inference rules. Proofs in authorization logics can serve as capabilities for gaining access to resources. Because a proof is derived from a set of credentials possibly issued by different parties, the issuer of a specific credential may not be aware of all the proofs that her credential may make possible. From this credential issuer’s standpoint, the policy expressed in her credential may thus have unexpected consequences. To solve this general problem, we propose a system in which credentials can specify constraints on how they are to be used. We show how to modularly extend wellstudied authorization logics to support the specification and enforcement of such constraints. A novelty of our design is that we allow the constraints to be arbitrary well-behaved functions over authorization proofs. Since all the information about an access is contained in the proofs, this makes it possible to express many interesting constraints. We study the formal properties of such a system, and give examples of constraints.
Starting Page	154
Ending Page	168
File Size	334976
Page Count	15
File Format	PDF
ISBN	9781424475100
ISSN	10636900
e-ISBN	9781424475117
DOI	10.1109/CSF.2010.18
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-07-17
Publisher Place	United Kingdom
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authorization Context Access control Limiting Wireless networks Formal languages Libraries Electronic mail Logic Computer security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Constraining credential usage in logic-based access control.

A formal language for access control policies in distributed environment

On Distributed System Security

A Usage-Based Authorization Architecture for Multidomain Environments

ARSL: A Language for Authorization Rule Specification in Software Security

A Temporal Description Logic Based Access Control Model for Expressing History Constrained Policies in Semantic Web

Flexible Authorizations with Logic Program

A modal logic for authorization specification and reasoning

Context-based access control management in ubiquitous environments

Constraining Credential Usage in Logic-Based Access Control

Similar Documents

Constraining credential usage in logic-based access control.

A formal language for access control policies in distributed environment

On Distributed System Security

A Usage-Based Authorization Architecture for Multidomain Environments

ARSL: A Language for Authorization Rule Specification in Software Security

A Temporal Description Logic Based Access Control Model for Expressing History Constrained Policies in Semantic Web

Flexible Authorizations with Logic Program

A modal logic for authorization specification and reasoning

Context-based access control management in ubiquitous environments

Constraining Credential Usage in Logic-Based Access Control