relation: http://eprints.imtlucca.it/3694/ title: Dynamic role authorization in multiparty conversations creator: Ghilezan, Silvia creator: Jakšić, Svetlana creator: Pantović, Jovanka creator: Pérez, Jorge A. creator: Torres Vieira, Hugo subject: QA75 Electronic computers. Computer science description: Protocols in distributed settings usually rely on the interaction of several parties and often identify the roles involved in communications. Roles may have a behavioral interpretation, as they do not necessarily correspond to sites or physical devices. Notions of role authorization thus become necessary to consider settings in which, e.g., different sites may be authorized to act on behalf of a single role, or in which one site may be authorized to act on behalf of different roles. This flexibility must be equipped with ways of controlling the roles that the different parties are authorized to represent, including the challenging case in which role authorizations are determined only at runtime. We present a typed framework for the analysis of multiparty interaction with dynamic role authorization and delegation. Building on previous work on conversation types with role assignment, our formal model is based on an extension of the π-calculus in which the basic resources are pairs channel-role, which denote the access right of interacting along a given channel representing the given role. To specify dynamic authorization control, our process model includes (1) a novel scoping construct for authorization domains, and (2) communication primitives for authorizations, which allow to pass around authorizations to act on a given channel. An authorization error then corresponds to an action involving a channel and a role not enclosed by an appropriate authorization scope. We introduce a typing discipline that ensures that processes never reduce to authorization errors, including when parties dynamically acquire authorizations. publisher: Springer date: 2016 type: Article type: PeerReviewed format: application/pdf language: en identifier: http://eprints.imtlucca.it/3694/1/art%253A10.1007%252Fs00165-016-0363-5-3.pdf identifier: Ghilezan, Silvia and Jakšić, Svetlana and Pantović, Jovanka and Pérez, Jorge A. and Torres Vieira, Hugo Dynamic role authorization in multiparty conversations. Formal Aspects of Computing, 28 (4). pp. 643-667. ISSN 0934-5043 (2016) relation: http://dx.doi.org/10.1007/s00165-016-0363-5 relation: 10.1007/s00165-016-0363-5