A logic for SDSI's linked local name spaces

Article type: Research Article

Authors: Halpern, Joseph Y.^{a; *} | van der Meyden, Ron^b

Affiliations: [a] Department of Computer Science, Cornell University, Ithaca, NY 14853, USA. E-mail: halpern@cs.cornell.edu; URL: http://www.cs.cornell.edu/home/halpern | [b] School of Computer Science and Engineering, University of New South Wales, Sydney 2052, Australia. E-mail: meyden@cse.unsw.edu.au; URL: http://www.cse.unsw.edu.au/~meyden

Correspondence: [*] Corresponding author.

Abstract: Abadi has introduced a logic to explicate the meaning of local names in SDSI, the Simple Distributed Security Infrastructure proposed by Rivest and Lampson. Abadi's logic does not correspond precisely to SDSI, however; it draws conclusions about local names that do not follow from SDSI's name resolution algorithm. Moreover, its semantics is somewhat unintuitive. This paper presents the Logic of Local Name Containment, which does not suffer from these deficiencies. It has a clear semantics and provides a tight characterization of SDSI name resolution. The semantics is shown to be closely related to that of logic programs, leading to an approach to the efficient implementation of queries concerning local names. A complete axiomatization of the logic is also provided.

DOI: 10.3233/JCS-2001-91-205

Journal: Journal of Computer Security, vol. 9, no. 1-2, pp. 105-142, 2001