Loading...

A logic for multi-domain authorization considering administrators

Iranmanesh, Z ; Sharif University of Technology | 2008

323 Viewed
  1. Type of Document: Article
  2. DOI: 10.1109/POLICY.2008.23
  3. Publisher: 2008
  4. Abstract:
  5. In multi-domain environments, authorization policies for each administrative domain are determined by either one administrator or through cooperation of multiple administrators. Proposed logic-based models for multi-domain environments' authorization neither consider an administrator as the legislator of a policy in policies' representation nor specify the domain of a policy explicitly. Considering legislators in policy specification provides the possibility of presenting composite administration and utilizing administrators' characteristics in policy analysis such as conflict resolution. In this paper, we propose the syntax, proof theory, and semantics of a logic in which administrators are considered in authorization policies' specification, composite administration is presented, and each authorization policy is explicitly associated with some administrative domains. We also claim that the logic is sound. The presented logic is based on modal logic and utilizes two calculi named the calculus of administrators and the calculus of administrative domains. A case study of the logic usage is presented. © 2008 IEEE
  6. Keywords:
  7. Biomineralization ; Information theory ; Mathematical techniques ; Administrative domains ; Authorization policies ; Case studies ; Conflict resolutions ; Distributed systems ; Logic-based modeling ; Modal logics ; Multi domains ; Policy analysis ; Policy specification ; Proof theory ; Differentiation (calculus)
  8. Source: 9th IEEE Workshop on Policies for Distributed Systems and Networks, POLICY 2008, Palisades, NY, 2 June 2008 through 4 June 2008 ; 2008 , Pages 189-196 ; 9780769531335 (ISBN)
  9. URL: https://ieeexplore.ieee.org/document/4556598