Types for role-based access control of dynamic web data

  • Authors:

  • Mariangiola Dezani-Ciancaglini;Silvia Ghilezan;Svetlana Jakšić;Jovanka Pantović

  • Affiliations:

  • Dipartimento di Informatica, Università di Torino, Italy;Faculty of Technical Sciences, University of Novi Sad, Serbia;Faculty of Technical Sciences, University of Novi Sad, Serbia;Faculty of Technical Sciences, University of Novi Sad, Serbia

  • Venue:
  • WFLP'10 Proceedings of the 19th international conference on Functional and constraint logic programming
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

We introduce a role-based access control calculus for modelling dynamic web data and a corresponding type system. It is an extension of the Xdp calculus proposed by Gardner and Maffeis. In our framework, a network is a parallel composition of locations, where each location contains processes with roles and a data tree whose edges are associated with roles. Processes can communicate, migrate from a location to another, use the data, change the data and the roles in the local tree. In this way, we obtain a model that controls process access to data. We propose a type system which ensures that a specified network policy is respected during computations. Finally, we show that our calculus obeys the following security properties: (1) all data trees and processes with roles in a location agree with the location policy; (2) a process can migrate only to a location with whose policy it agrees; (3) a process with roles can read and modify only data which are accessible to it; (4) a process with roles can enable and disable roles in agreement with the location policy.