Authentication and revocation in SPM extended abstract

  • Authors:
  • Claudio Calvelli;Vijay Varadharajan

  • Affiliations:
  • -;-

  • Venue:
  • ACM SIGOPS Operating Systems Review
  • Year:
  • 1993

Quantified Score

Hi-index 0.00

Visualization

Abstract

SPM formalism can be used to specify the protection structure of a system, and it also provides an algorithm to decide if some privileges can be granted to some subjects. This paper extends the model to take into account authentication and revocation. The authentication extension gives an algorithm to find out which authentication steps must be taken by a subject in order to gain some privileges. The revocation extension allows to decide whether certain privileges can be given back after they have been revoked. The two extensions are independent in the sense that each one corresponds to a change to a different part of the decision algorithm.