Independently verifiable decentralized role-based delegation

Authors:
Roberto Tamassia;Danfeng Yao;William H. Winsborough
Affiliations:
Department of Computer Science, Brown University, Providence, RI;Department of Computer Science, Virginia Polytechnic Institute and State University, Blacksburg, VA;Department of Computer Science, University of Texas at San Antonio, San Antonio, TX
Venue:
IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans
Year:
2010

Citing 32
Cited 0

An identity-based key-exchange protocol

EUROCRYPT '89 Proceedings of the workshop on the theory and application of cryptographic techniques on Advances in cryptology
A new approach for delegation using hierarchical delegation tokens

Proceedings of the IFIP TC6/TC11 international conference on Communications and multimedia security II
A method for obtaining digital signatures and public-key cryptosystems

Communications of the ACM
Policy-directed certificate retrieval

Software—Practice & Experience
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
Certificate chain discovery in SPKI?SDSI

Journal of Computer Security
Identity-Based Encryption from the Weil Pairing

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Efficient Algorithms for Pairing-Based Cryptosystems

CRYPTO '02 Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology
Short Signatures from the Weil Pairing

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
KeyNote: Trust Management for Public-Key Infrastructures (Position Paper)

Proceedings of the 6th International Workshop on Security Protocols
Distributed credential chain discovery in trust management

Journal of Computer Security
PBDM: a flexible delegation model in RBAC

Proceedings of the eighth ACM symposium on Access control models and technologies
Design of a Role-Based Trust-Management Framework

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Authentic data publication over the internet

Journal of Computer Security - IFIP 2000
Decentralized Trust Management

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
SD3: A Trust Management System with Certified Evaluation

SP '01 Proceedings of the 2001 IEEE Symposium on Security and Privacy
X-GTRBAC admin: a decentralized administration model for enterprise wide access control

Proceedings of the ninth ACM symposium on Access control models and technologies
Role-based cascaded delegation

Proceedings of the ninth ACM symposium on Access control models and technologies
A Generalized Temporal Role-Based Access Control Model

IEEE Transactions on Knowledge and Data Engineering
Secure collaboration in mediator-free environments

Proceedings of the 12th ACM conference on Computer and communications security
On Improving the Performance of Role-Based Cascaded Delegation in Ubiquitous Computing

SECURECOMM '05 Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks
Certificate revocation and certificate update

SSYM'98 Proceedings of the 7th conference on USENIX Security Symposium - Volume 7
Secure delegation for distributed object environments

COOTS'98 Proceedings of the 4th conference on USENIX Conference on Object-Oriented Technologies and Systems - Volume 4
Compact and Anonymous Role-Based Authorization Chain

ACM Transactions on Information and System Security (TISSEC)
Self-certified public keys

EUROCRYPT'91 Proceedings of the 10th annual international conference on Theory and application of cryptographic techniques
Authenticated dictionaries for fresh attribute credentials

iTrust'03 Proceedings of the 1st international conference on Trust management
Certificate-based encryption and the certificate revocation problem

EUROCRYPT'03 Proceedings of the 22nd international conference on Theory and applications of cryptographic techniques
Aggregate and verifiably encrypted signatures from bilinear maps

EUROCRYPT'03 Proceedings of the 22nd international conference on Theory and applications of cryptographic techniques
Authenticated data structures for graph and geometric searching

CT-RSA'03 Proceedings of the 2003 RSA conference on The cryptographers' track
The human in the loop of a delegated agent: the theory of adjustable social autonomy

IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans
Achieving secure and flexible M-services through tickets

IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans
A flexible delegation-type interface enhances system performance in human supervision of multiple robots: empirical studies with RoboFlag

IEEE Transactions on Systems, Man, and Cybernetics, Part A: Systems and Humans

Quantified Score

Hi-index	0.00

Visualization

Abstract

In open systems such as cloud computing platforms, delegation transfers privileges among users across different administrative domains and facilitates information sharing. We present an independently verifiable delegation mechanism, where a delegation credential can be verified without the participation of domain administrators. Our protocol, called role-based cascaded delegation (RBCD), supports simple and efficient cross-domain delegation of authority. RBCD enables a role member to create delegations based on the dynamic needs of collaboration; in the meantime, a delegation chain can be verified by anyone without the participation of role administrators. We also describe an efficient realization of RBCD by using aggregate signatures, where the authentication information for an arbitrarily long role-based delegation chain is captured by one short signature of constant size.