Paper Info
Title
Non-delegatable authorities in capability systems
Abstract
We present a novel technique, known as the non-delegatable authority (NDA), for distributing authority to unconfined subjects in capability systems that prevents them from sharing the exact same authority that they have been given with anyone else. This feature is present in common systems based on access control lists (ACLs) in which one may hand out a permission without handing out the associated “grant” right, but has been thought to be impossible to express in capability systems until now. Consequently, we demonstrate that NDAs may be used to express ACL-like constructs and their basic pattern is directly applicable for implementing multi-level security and identity-based access controls in the object-capability model. The extra complexity introduced by our NDA implementation can be hidden behind constructs that allow NDAs to be wielded as if they were ordinary capabilities to the target resource. These constructs cannot break the non-delegatability constraint and allow NDAs to be used effectively, although with less efficiency than delegatable authorities.
Year
DOI
Venue
2008
10.3233/JCS-2008-0314
Journal of Computer Security
Keywords
Field
DocType
access control
Permission,Computer science,Computer security,Access control,Distributed computing
Journal
Volume
Issue
ISSN
16
6
0926-227X
Citations 
PageRank 
References 
5
0.46
15
Authors
2
Name
Order
Citations
PageRank
Toby C. Murray1353.71
Duncan A. Grove291.21