A Typed Process Calculus for Fine-Grained Resource Access Control in Distributed Computation

We propose the πD -calculus, a process calculus that can flexibly model fine-grained control of resource access in distributed computation, with a type system that statically prevents access violations. Access control of resources is important in distributed computation, where resources themselves or their contents may be transmitted from one domain to another and thereby vital resources may be exposed to unauthorized processes. In πD , a notion of hierarchical domains is inas an abstraction of protection domains, and considered as the unit of access control. Domains are treated as first-class values and can be created dynamically. In addition, the hierarchal structure of domains can be extended dynamically as well. These features are the source of the expressiveness of πD . This paper presents the syntax, the operational semantics, and the type system of πD , with examples to demonstrate its expressiveness.

• Type: Conference
• Year: 2001
• Where: TACS
• Authors: Daisuke Hoshina, Eijiro Sumii, Akinori Yonezawa
• Keywords: Access Control, Distributed Computation, Resources, Software Engineering, TACS 2001