Scalable Authorization in Distributed Systems

建议编号：CCR-9901700 PI：Ravi Sandhu项目摘要段落授权必须是分布式计算中有效安全的基石。 此外，在大规模系统中，授权本身必须是可扩展的。 本项目将通过同时和协同地观察可扩展授权的体系结构、机制和模型来进行整体调查。这三个方面相互交织、相互依赖，因此一个方面的决策会影响其他方面的选择。 然而，为了科学研究，它们可以被有利地分离。 该项目将开发和完善一套执法和管理架构，并分析其相对优势和劣势。 系统地分析了绑定身份和授权信息的技术，以及基于不同绑定方式的机制的优缺点。 该项目的第三个方面将开发授权管理的分散模式。 本项目将进行理论和概念基础研究，并通过选定的概念验证实验来验证理论。

Proposal Number: CCR-9901700PI: Ravi SandhuProject-summary-paragraphAuthorization must be a cornerstone of effective security indistributed computing. Moreover, in large-scale systems authorizationmust itself be scalable. This project will conduct a holisticinvestigation by looking concurrently and synergistically atarchitecture, mechanisms, and models for scalable authorization.These three aspects are intertwined and mutually dependent, sodecisions made in one impact the choices in others. Yet they can beprofitably separated for scientific study. The project will developand refine a set of architectures for enforcement and administration,and analyze their relative advantages and disadvantages. It willdevelop a systematic analysis of techniques for binding identity andauthorization information, and the pros and cons of mechanisms basedon different binding means. The third prong of the project willdevelop decentralized models for management of authorizations. Thisproject will undertake theoretical and conceptual basic researchaugmented by selected proof-of-concept experiments to validate thetheory.