Number of Authors: 1
2003 (English)Conference paper (Refereed)
SPKI is a certificate-based framework for authorisation in distributed systems. The SPKI framework is extended by an iteration construct, essentially Kleene star, to express constraints on delegation chains. Other possible applications, not explored in the paper, include multidomain network routing path constraints. The main decision problems for the extended language are shown to correspond to regular language membership and containment respectively. To support an efficient decision algorithm in both cases we give a sound and complete inference system for a fragment of the language which is decidable in polynomial time. We finally show how to use the extended syntax to represent constrained delegation in SPKI.
Place, publisher, year, edition, pages
Computer and Information Science
IdentifiersURN: urn:nbn:se:ri:diva-14589OAI: oai:DiVA.org:ri-14589DiVA: diva2:1035878
Cambridge Security Protocols, 11th International Workshop
Revised Selected Papers. Lecture Notes in Computer Science 3364 Springer 2005. ISBN 3-540-28389-72016-10-132016-10-13