期刊文献+

基于SPKI的分布式委派凭证存储框架

A Distributed Delegation Credential Storage Framework Based on SPKI
下载PDF
导出
摘要 信任管理(TM)是面向开放多域环境的分布式授权技术。TM系统从网络中搜索委派凭证以进行分布式授权决策,面临效率和可用性问题。本文提出一种基于SPKI的分布式凭证存储框架,将委派凭证冗余地存储到相关实体,以避免委派凭证的动态搜索过程,有助于解决现有TM系统凭证管理的局限性。 Trust Management (TM) is a distributed authorization technology for open multi domain environments. TM systems search delegation credentials from the network for making distributed authorization decisions, which is not efficient and highly available. This paper proposes a distributed credential management framework, which stores delegation credentials redundantly at relevant entities to avoid dynamic search processes of delegation credentials. Our approach is helpful in overcoming the limitations of the credential management mechanisms of the existing TM systems.
出处 《计算机工程与科学》 CSCD 北大核心 2009年第7期23-24,49,共3页 Computer Engineering & Science
基金 国家973计划资助项目(2005CB321800) 国家863计划资助项目(2006AA01Z198 2007AA010301)
关键词 信任管理 委派 凭证存储 trust management delegation credential storage
  • 相关文献

参考文献7

  • 1Blaze M, Feigenbaum J, Lacy J. Decentralized Trust Management [C]//Proc of the 17th Syrup on Security and Privacy, 1996:164-173.
  • 2Ellison C M, Frantz B, Lampson B, et al. SPKI Credential Theory[S]. RFC 2693,1998.
  • 3Li Ninghui,Grosof B N, Feigenbaum J. Delegation Logic: A Logic- Based Approach to Distributed Authorization[J]. ACM Trans on Information System Security,2008,6(1) : 128-171.
  • 4Li Ninghui,Winsborough W H, Mitchell J C. Distributed Credential Chain Discovery in Trust Management [C]//Proc of the 8th ACM Conf on Computer and Communications Security, 2001 : 156-165.
  • 5Becker M Y, Sewell P. Cassandra: Flexible Trust Management, Applied to Electronic Health Records [C]//Proc of the 17th IEEE Computer Security Foundations Workshop, 2004: 139-154.
  • 6Nikander P,Viljanen L. Storing and Retrieving Internet Credentials [C]//Proc of the 3rd Nordic Workshop on Secure Computer Systems, 1998:1-13.
  • 7Becker M Y. A Formal Security Policy for an NHS Electronic Health Record Service[R]. Technical Report UCAM-CL-TR 628, Computer Laboratory, University of Cambridge, 2005.

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部