A ticket-based access control architecture for object systems¹

Article type: Research Article

Authors: Hale, John^{; *} | Threet, Jody | Shenoi, Sujeet

Affiliations: Department of Computer Science, University of Tulsa, Tulsa, OK 74104, USA

Correspondence: [*] Corresponding author: E-mail: john-hale@utulsa.edu.

Note: [1] Research supported by MPO Contracts MDA904-94-C-6117, MDA904-96-1-0114 and MDA904-98-CA-900.

Abstract: The design and implementation of authorization services for distributed object systems are hindered by the semantic diversity of object models, the brittleness of access control mechanisms, and the lack of design and analysis tools. This paper presents a primitive ticket-based access control architecture that can model a variety of authorization policies. The access control architecture is integrated within a primitive distributed object model that can capture most distributed object languages and systems. The integration provides a common foundation for access control in heterogeneous distributed object systems, instrumental to achieving high assurance secure interoperability.

DOI: 10.3233/JCS-2000-8103

Journal: Journal of Computer Security, vol. 8, no. 1, pp. 43-65, 2000