Role-based access control for boxed ambients

Our society is increasingly moving towards richer forms of information exchange where mobility of processes and devices plays a prominent role. This tendency has prompted the academic community to study the security problems arising from such mobile environments, and in particular, the security policies regulating who can access the information in question. In this paper we describe a calculus for mobile processes and propose a mechanism for specifying access privileges based on a combination of the identity of the users seeking access, their credentials, and the location from which they seek it, within a reconfigurable nested structure. We define BACIR, a boxed ambient calculus extended with a Distributed RoleBased Access Control mechanism where each ambient controls its own access policy. A process in BACIR is associated with an owner and a set of activated roles that grant permissions for mobility and communication. The calculus includes primitives to activate and deactivate roles....

• Type: Journal
• Year: 2008
• Where: TCS
• Authors: Adriana B. Compagnoni, Elsa L. Gunter, Philippe Bidinger
• Keywords: Reconfigurable Nested Structure, Security, TCS 2008, Theoretical Computer Science, Type System