Embedding JAAS in agent roles to apply local security policies

  • Authors:
  • Giacomo Cabri;Luca Ferrari;Letizia Leonardi

  • Affiliations:
  • Università di Modena e Reggio Emilia, Modena, Italy;Università di Modena e Reggio Emilia, Modena, Italy;Università di Modena e Reggio Emilia, Modena, Italy

  • Venue:
  • Proceedings of the 3rd international symposium on Principles and practice of programming in Java
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

Agents are an emerging technology that grants programmers a new way to exploit distributed resources. Roles are a powerful concept that can be used to model agent interactions, allowing agents to dynamically acquire operations to make specific tasks, and enabling separation of concerns and code reusability. Nevertheless roles should be developed taking into account permissions needed for the execution of their operations. The standard Java policy file mechanism does not suffice in this scenario, since a fine grain in managing permissions is required. This paper focuses on how to exploit the Java Authentication and Authorization Service (JAAS) at the role level in order to apply authorization and local policies to Java agents for limiting their operations.