This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
1989 IEEE Symposium on Security and Privacy
A Secure Identity-Based Capability System
Oakland, CA
May 01-May 03
ISBN: 0-8186-1939-2
We present the design of an Identity-based Capability protection system ICAP, which is aimed at a distributed system in a network environment. The semantics of traditional capabilities are modified to incorporate subject identities. This enables the monitoring, mediating, and recording of capability propagations to enforce security policies. It also supports administrative activities such as traceability. We have developed an exception list approach to achieve rapid revocation and the idea of capability propagation trees for complete revocation. Compared with existing capability system designs, ICAP requires much less storage and has the potential of lower cost and better real-time performance. We propose to expand Kain and Landwehr's design taxonomy of capability-based systems to cover a wider range of designs.
Citation:
Li Gong, "A Secure Identity-Based Capability System," sp, pp.56, 1989 IEEE Symposium on Security and Privacy, 1989
Usage of this product signifies your acceptance of the Terms of Use.