Cryptographic Access Control in a Distributed File System

Anthony Harrington; Christian D. Jensen

doi:10.1145/775412.775432

Cryptographic Access Control in a Distributed File System

Anthony Harrington, Christian D. Jensen

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability. Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics. The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.

Original language	English
Title of host publication	Proceedings of Eighth ACM Symposium on Access Control Models and Technologies
Publication date	2003
Pages	158-165
DOIs	https://doi.org/10.1145/775412.775432
Publication status	Published - 2003
Event	Eighth ACM Symposium on Access Control Models and Technologies - Como, Italy Duration: 2 Jun 2003 → 3 Jun 2003 Conference number: 8

Conference

Conference	Eighth ACM Symposium on Access Control Models and Technologies
Number	8
Country/Territory	Italy
City	Como
Period	02/06/2003 → 03/06/2003

Access to Document

10.1145/775412.775432

OpenUrl availability

Full text

Cite this

@inproceedings{8d73920621b445149c1f169ec80b9cb1,

title = "Cryptographic Access Control in a Distributed File System",

abstract = "Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability. Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics. The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.",

author = "Anthony Harrington and Jensen, \{Christian D.\}",

year = "2003",

doi = "10.1145/775412.775432",

language = "English",

pages = "158--165",

booktitle = "Proceedings of Eighth ACM Symposium on Access Control Models and Technologies",

note = "Eighth ACM Symposium on Access Control Models and Technologies, SACMAT 2003 ; Conference date: 02-06-2003 Through 03-06-2003",

}

TY - GEN

T1 - Cryptographic Access Control in a Distributed File System

AU - Harrington, Anthony

AU - Jensen, Christian D.

N1 - Conference code: 8

PY - 2003

Y1 - 2003

N2 - Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability. Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics. The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.

AB - Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability. Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics. The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.

U2 - 10.1145/775412.775432

DO - 10.1145/775412.775432

M3 - Article in proceedings

SP - 158

EP - 165

BT - Proceedings of Eighth ACM Symposium on Access Control Models and Technologies

T2 - Eighth ACM Symposium on Access Control Models and Technologies

Y2 - 2 June 2003 through 3 June 2003

ER -

Cryptographic Access Control in a Distributed File System

Abstract

Conference

Access to Document

OpenUrl availability

Fingerprint

Cite this