(Enter summary)
Abstract: In new key-oriented access control systems, access rights are delegated from key to key with chains of signed certificates. This paper describes an efficient graph-search technique for making authorization decisions from certificate databases. The design of the algorithm is based on conceptual analysis of typical delegation network structure and it works well with threshold certificates. Experiments with generated certificate data confirm that it is feasible to find paths of delegation in large ... (Update)
Context of citations to this paper: More
...begin by finding all ACM members and all university students. Graph based approaches to chain discovery have been used before, e.g. by Aura [1] for SPKI delegation certificates and by Clarke et al. 8] for SDSI name certificates without linked names. Neither of them deals...
...it relatively straightforward to manage cyclic dependencies. Graph based approaches to chain discovery have been used before, e.g. by Aura [1] for SPKI delegation certificates and by Clarke et al. 6] for SDSI name certificates without linked names. However, neither of them...
Cited by: More
Extending the SDSI / SPKI model through federation webs - Santin, Fraga, Maziero (2003)
(Correct)
Federation Web: A Scheme to Compound Authorization.. - Santin, Fraga.. (2003)
(Correct)
Delegation Logic: A Logic-based Approach to Distributed Authorization - Li (2000)
(Correct)
Similar documents (at the sentence level):
6.0%: On the Structure of Delegation Networks - Aura (1997)
(Correct)
Active bibliography (related documents): More All
0.5: Distributed Access-Rights Management with Delegation Certificates - Aura
(Correct)
0.2: Delegation-Based Access Control for Intelligent Network.. - Aura, Koponen, Räsänen (1998)
(Correct)
0.2: Information Agents for Mobile and Embedded Devices - Finin, Joshi, Kagal.. (2001)
(Correct)
Similar documents based on text: More All
1.4: Certificate Revocation and Certificate Update - Naor, Nissim (1998)
(Correct)
1.4: Implementing an SPKI Certificate Repository within the DNS - Hasu, Kortesniemi (2000)
(Correct)
1.3: Smart Certicates: Extending X.509 for Secure Attribute.. - Park, Sandhu
(Correct)
Related documents from co-citation: More All
10: Decentralized trust management
- Blaze, Feigenbaum et al. - 1996
9: SPKI Certificate Theory (context) - Ellison, Frantz et al.
7: Compliance checking in the policymaker trust management system
- Blaze, Feigenbaum et al. - 1998
BibTeX entry: (Update)
Tuomas Aura. Fast access control decisions from delegation certicate databases. In Proceedings of 3rd Australasian Conference on Information Security and Privacy ACISP '98, volume 1438 of LNCS, pages 284295, Brisbane, Australia, July 1998. Springer Verlag. http://citeseer.ist.psu.edu/aura98fast.html More
@article{ aura98fast,
author = "Tuomas Aura",
title = "Fast Access Control Decisions from Delegation Certificate Databases",
journal = "Lecture Notes in Computer Science",
volume = "1438",
pages = "28+",
year = "1998",
url = "citeseer.ist.psu.edu/aura98fast.html" }
Citations (may not include all citations):
305
Decentralized trust management
- Blaze, Feigenbaum et al. - 1996 ACM
23
the structure of delegation networks
- Aura - 1998
20
Inside Corba : Distributed Object Standards and Applications (context) - Mowbray, Ruh - 1997
15
Certifying trust (context) - Lehti, Nikander - 1998 ACM DBLP
5
Simple public key certicate (context) - Ellison, Franz et al. - 1997
4
A simple distributed security infrastucture (context) - Rivest, Lampson - 1996
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://research.microsoft.com/users/tuomaura/Publications/Publications.aspx): More
Security of Internet Location Management - Aura, Roe, Arkko
(Correct)
Practical Invisibility in Digital Communication - Aura (1996)
(Correct)
Stateless Connections - Aura (1997)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC