Effective trust management through a hybrid logical and relational approach

Despite a plethora of recent research regarding trust management approaches to authorization, relatively little attention has been given to exactly how these technologies can be effectively deployed. In this paper, we investigate one way in which well-established logical trust management systems described in the literature can be deployed within enterprise environments. Specifically, we develop a framework within which logical trust management policies can be managed using a relational DBMS. We describe a correct and complete procedure for compiling CTM credentials into dynamic views within a database, and show how the resulting system can be used to perform role membership checks or to enumerate the members of a given role. We then propose a hybrid algorithm that leverages the logical ruleset and the underlying DBMS to efficiently enumerate the capabilities ascribed to a given user. We also present an evaluation of a prototype implementation of our framework that demonstrates the p...

• Type: Conference
• Year: 2010
• Where: CCS
• Authors: Adam J. Lee, Ting Yu, Yann Le Gall
• Keywords: CCS 2010, Logical Trust Management, Security Privacy, Trust Management, Trust Management Approaches