Ghilezan, Silvia and Jakšić, Svetlana and Pantović, Jovanka and Pérez, Jorge A. and Torres Vieira, Hugo A Typed Model for Dynamic Authorizations. Electronic Proceedings in Theoretical Computer Science, 203. pp. 73-84. ISSN 2075-2180 (2015)
|
PDF
- Submitted Version
Available under License Creative Commons Attribution Non-commercial. Download (309kB) | Preview |
Abstract
Security requirements in distributed software systems are inherently dynamic. In the case of authorization policies, resources are meant to be accessed only by authorized parties, but the authorization to access a resource may be dynamically granted/yielded. We describe ongoing work on a model for specifying communication and dynamic authorization handling. We build upon the pi-calculus so as to enrich communication-based systems with authorization specification and delegation; here authorizations regard channel usage and delegation refers to the act of yielding an authorization to another party. Our model includes: (i) a novel scoping construct for authorization, which allows to specify authorization boundaries, and (ii) communication primitives for authorizations, which allow to pass around authorizations to act on a given channel. An authorization error may consist in, e.g., performing an action along a name which is not under an appropriate authorization scope. We introduce a typing discipline that ensures that processes never reduce to authorization errors, even when authorizations are dynamically delegated.
| Item Type: | Article |
|---|---|
| Identification Number: | https://doi.org/10.4204/EPTCS.203.6 |
| Additional Information: | Proceedings Eighth International Workshop on Programming Language Approaches to Concurrency- and Communication-cEntric Software, PLACES 2015, London, UK, 18th April 2015. |
| Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
| Research Area: | Computer Science and Applications |
| Depositing User: | Hugo Vieria |
| Date Deposited: | 04 May 2017 13:35 |
| Last Modified: | 04 May 2017 13:35 |
| URI: | http://eprints.imtlucca.it/id/eprint/3690 |
Actions (login required)
 |
Edit Item |
