Active Certificates: A Framework for Delegation

Nikita Borisov; Eric Brewer

Active Certificates: A Framework for Delegation

Nikita Borisov
, Eric Brewer

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

In this paper, we present a novel approach to delegation in computer systems. We exploit mobile code capabilities of today’s systems to build active certificates: cryptographically signed mobile agents that implement delegation policy. Active certificates arrive at a new combination of properties, including expressivity, transparency, and offline operation, that is not available in existing systems. These properties make active certificates powerful tools to express delegation. Active certificates can also be used as a mechanism to implement complex policy systems, such as public key infrastructures; systems built in this way are easily extensible and interoperable. A prototype implementation of active certificates has been built as part of the Ninja [17] project.

Original language	English (US)
Title of host publication	Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002
Publisher	The Internet Society
ISBN (Electronic)	1891562142, 9781891562143
State	Published - 2002
Externally published	Yes
Event	9th Symposium on Network and Distributed System Security, NDSS 2002 - San Diego, United States Duration: Feb 6 2002 → Feb 8 2002

Publication series

Name	Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002

Conference

Conference	9th Symposium on Network and Distributed System Security, NDSS 2002
Country/Territory	United States
City	San Diego
Period	2/6/02 → 2/8/02

ASJC Scopus subject areas

Computer Networks and Communications
Control and Systems Engineering
Safety, Risk, Reliability and Quality

Library availability

Discover UIUC Full Text

Cite this

Borisov, N & Brewer, E 2002, Active Certificates: A Framework for Delegation. in Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002. Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002, The Internet Society, 9th Symposium on Network and Distributed System Security, NDSS 2002, San Diego, United States, 2/6/02.

@inproceedings{46e959be7e8c4a3a989ee002e241a9c6,

title = "Active Certificates: A Framework for Delegation",

abstract = "In this paper, we present a novel approach to delegation in computer systems. We exploit mobile code capabilities of today{\textquoteright}s systems to build active certificates: cryptographically signed mobile agents that implement delegation policy. Active certificates arrive at a new combination of properties, including expressivity, transparency, and offline operation, that is not available in existing systems. These properties make active certificates powerful tools to express delegation. Active certificates can also be used as a mechanism to implement complex policy systems, such as public key infrastructures; systems built in this way are easily extensible and interoperable. A prototype implementation of active certificates has been built as part of the Ninja [17] project.",

author = "Nikita Borisov and Eric Brewer",

note = "We would like to thank Adrian Perrig, Mark Miller, David Wagner, Dawn Song, Oleg Kolesnikov, and the anonymous referees for insightful comments on earlier versions of this paper.; 9th Symposium on Network and Distributed System Security, NDSS 2002 ; Conference date: 06-02-2002 Through 08-02-2002",

year = "2002",

language = "English (US)",

series = "Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002",

publisher = "The Internet Society",

booktitle = "Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002",

}

TY - GEN

T1 - Active Certificates

T2 - 9th Symposium on Network and Distributed System Security, NDSS 2002

AU - Borisov, Nikita

AU - Brewer, Eric

N1 - We would like to thank Adrian Perrig, Mark Miller, David Wagner, Dawn Song, Oleg Kolesnikov, and the anonymous referees for insightful comments on earlier versions of this paper.

PY - 2002

Y1 - 2002

N2 - In this paper, we present a novel approach to delegation in computer systems. We exploit mobile code capabilities of today’s systems to build active certificates: cryptographically signed mobile agents that implement delegation policy. Active certificates arrive at a new combination of properties, including expressivity, transparency, and offline operation, that is not available in existing systems. These properties make active certificates powerful tools to express delegation. Active certificates can also be used as a mechanism to implement complex policy systems, such as public key infrastructures; systems built in this way are easily extensible and interoperable. A prototype implementation of active certificates has been built as part of the Ninja [17] project.

AB - In this paper, we present a novel approach to delegation in computer systems. We exploit mobile code capabilities of today’s systems to build active certificates: cryptographically signed mobile agents that implement delegation policy. Active certificates arrive at a new combination of properties, including expressivity, transparency, and offline operation, that is not available in existing systems. These properties make active certificates powerful tools to express delegation. Active certificates can also be used as a mechanism to implement complex policy systems, such as public key infrastructures; systems built in this way are easily extensible and interoperable. A prototype implementation of active certificates has been built as part of the Ninja [17] project.

UR - https://www.scopus.com/pages/publications/84910666999

UR - https://www.scopus.com/pages/publications/84910666999#tab=citedBy

M3 - Conference contribution

AN - SCOPUS:84910666999

T3 - Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002

BT - Proceedings of the Symposium on Network and Distributed System Security, NDSS 2002

PB - The Internet Society

Y2 - 6 February 2002 through 8 February 2002

ER -

Active Certificates: A Framework for Delegation

Abstract

Publication series

Conference

ASJC Scopus subject areas

Library availability

Related links

Fingerprint

Cite this