Trustworthy Access Control with Untrustworthy Web Servers

If sensitive information is to be included in a shared web, access controls will be required. However, the complex software needed to provide a web service is prone to failure. To provide access control without relying on such software, encryption can be used. Bob is a prototype system that supports complex access control expressions through the transparent use of encryption.

• Type: Conference
• Year: 1999
• Where: ACSAC
• Authors: Tim Wilkinson, Dave Hearn, Simon R. Wiseman
• Keywords: Access Control, ACSAC 1999, Complex Access Control, Complex Software, Security Privacy