Reasoning on Weighted Delegatable Authorizations

Authors:
Chun Ruan;Vijay Varadharajan
Affiliations:
School of Computing and Mathematics, University of Western Sydney, Penrith South DC, Australia 1797;School of Computing and Mathematics, University of Western Sydney, Penrith South DC, Australia 1797 and Department of Computing, Macquarie University, North Ryde, Australia 2109
Venue:
DEXA '09 Proceedings of the 20th International Conference on Database and Expert Systems Applications
Year:
2009

Citing 4
Cited 1

Logic-Based Reasoning on Delegatable Authorizations

ISMIS '02 Proceedings of the 13th International Symposium on Foundations of Intelligent Systems
A Logical Framework for Reasoning on Data Access Control Policies

CSFW '99 Proceedings of the 12th IEEE workshop on Computer Security Foundations
Authorization in Distributed Systems: A Formal Approach

SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
A Logical Language for Expressing Authorizations

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy

Logic based authorization program and its implementation

Proceedings of the 4th international conference on Security of information and networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper studies logic based methods for representing and evaluating complex access control policies needed by modern database applications. In our framework, authorization and delegation rules are specified in a Weighted Delegatable Authorization Program (WDAP) which is an extended logic program. We show how extended logic programs can be used to specify complex security policies which support weighted administrative privilege delegation, weighted positive and negative authorizations, and weighted authorization propagations. We also propose a conflict resolution method that enables flexible delegation control by considering priorities of authorization grantors and weights of authorizations. A number of rules are provided to achieve delegation depth control, conflict resolution, and authorization and delegation propagations.