Designing and evaluating weighted delegatable authorizations. (29th April 2015)

• Record Type: Journal Article
• Authors: Ruan, Chun; Orgun, Mehmet A.; Orgun, Atilla Elçi; Pieprzyk, Josef; Chefranov, Alexander; Shankaran, Rajan; Wang, Huaxiong; Zhuge, Hai
• Is Part Of: Concurrency and computation. Volume 27:Number 15(2015:Oct.)
• Page Start: 3877
• Page End: 3891
• Publication Date: 2015-04-29
• Subjects: Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.3493
• Languages: English
• ISSNs: 1532-0626

Abstract

<abstract abstract-type="main" id="cpe3493-abs-0001"> <title>Summary</title> <p id="cpe3493-para-0001">This paper studies logic‐based methods for representing and evaluating complex access control policies needed by modern applications. In our framework, authorization and delegation rules are specified in a weighted delegatable authorization program, which is an extended logic program. We show how extended logic programs can be used to specify complex security policies, which support weighted administrative privilege delegation, weighted positive and negative authorizations, and weighted authorization propagations. We also present a conflict resolution method that enables flexible delegation control by considering priorities of authorization grantors and weights of authorizations. We show how this method can be specialized to achieve many of the current existing conflict resolution methods. A number of rules are provided to achieve delegation depth control, conflict resolution, and authorization and delegation propagations. We also show how to use <sc>SMODELS</sc> to implement weighted delegatable authorization program. Copyright © 2015 John Wiley &amp; Sons, Ltd.</p> </abstract>