Distributed Access Control for Accountable Systems

负责系统的分布式访问控制

• 批准号: 0209083
• 负责人: Dominic Duggan
• 金额: --
• 依托单位: Stevens Institute of Technology
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-09-01 至 2008-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0209083&HistoricalAwards=false
• 关键词: Distributed; Access; Control; Accountable; Systems

Assurance for distributed systems is based on constantly strengthening the protective boundaries that prevent and detect unauthorized access to computer systems. Accountability, ensuring that principals are liable for their actions, is an equally important issue. This project investigates a programming language approach to tracking accountability in distributed systems, specifically by extending the Java language to maintain a fine-grained audit trail for accountability purposes.The proposed approach is based on associating secrecy (access control) and integrity information with data as it is retrieved and copied over the network. Distributed access control is not just enforced at one point in the network where the data is accessed, but may be enforced wherever a copy of the data is accessed. Distributed information flow types enforce access rights and enforce a form of causality that supports tracking of tracking of accountability for principals. In recognition of the fact that communication may be over an insecure network, sensitive data is assumed to be "virtually" signed or encrypted, for integrity and secrecy guarantees, respectively. The computational burden of the ubiquitous application of cryptographic operations is avoided through the use of cryptographic types for static checking where possible.

分布式系统的保证基于不断加强保护边界，以防止和检测对计算机系统的未经授权的访问。问责制，即确保负责人对其行为负责，是一个同样重要的问题。该项目研究了一种编程语言的方法来跟踪问责制在分布式系统中，特别是通过扩展Java语言，以保持一个细粒度的审计线索的Accountability purposes.The建议的方法是基于关联的保密性（访问控制）和完整性信息的数据，因为它是检索和复制通过网络。 分布式访问控制不仅在网络中访问数据的一个点上实施，而且可以在访问数据副本的任何地方实施。 分布式信息流类型强制执行访问权限，并强制执行一种支持跟踪主体责任的因果关系。 由于认识到通信可能是通过不安全的网络进行的这一事实，敏感数据被假定为“虚拟”签名或加密，分别用于完整性和保密性保证。 通过在可能的情况下使用加密类型进行静态检查，避免了加密操作的普遍应用的计算负担。