Dynamic role authorization in multiparty conversations

Ghilezan, Silvia and Jakšić, Svetlana and Pantović, Jovanka and Pérez, Jorge A. and Torres Vieira, Hugo Dynamic role authorization in multiparty conversations. Formal Aspects of Computing, 28 (4). pp. 643-667. ISSN 0934-5043 (2016)

PDF - Published Version Restricted to Repository staff only Download (620kB)

Abstract

Protocols in distributed settings usually rely on the interaction of several parties and often identify the roles involved in communications. Roles may have a behavioral interpretation, as they do not necessarily correspond to sites or physical devices. Notions of role authorization thus become necessary to consider settings in which, e.g., different sites may be authorized to act on behalf of a single role, or in which one site may be authorized to act on behalf of different roles. This flexibility must be equipped with ways of controlling the roles that the different parties are authorized to represent, including the challenging case in which role authorizations are determined only at runtime. We present a typed framework for the analysis of multiparty interaction with dynamic role authorization and delegation. Building on previous work on conversation types with role assignment, our formal model is based on an extension of the π-calculus in which the basic resources are pairs channel-role, which denote the access right of interacting along a given channel representing the given role. To specify dynamic authorization control, our process model includes (1) a novel scoping construct for authorization domains, and (2) communication primitives for authorizations, which allow to pass around authorizations to act on a given channel. An authorization error then corresponds to an action involving a channel and a role not enclosed by an appropriate authorization scope. We introduce a typing discipline that ensures that processes never reduce to authorization errors, including when parties dynamically acquire authorizations.

Item Type:	Article
Identification Number:	10.1007/s00165-016-0363-5
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Research Area:	Computer Science and Applications
Depositing User:	Hugo Vieria
Date Deposited:	04 May 2017 14:10
Last Modified:	04 May 2017 14:10
URI:	http://eprints.imtlucca.it/id/eprint/3694

Actions (login required)

Edit Item