Access Control Model For Distributed Object System With Mobile Agents Mid Term Presentation John Melvin Antony

The Big Picture

The Modules Access Control Mechanism - Certificates Policy Definition Language Permission Set Policy Engine Implementation

Certificates Policy Certificate & Attribute Certificate Certificate Structure. - XML - DTD - Contents(User Id, Resident Id, Bond Id, Validity, Policy definition Language)

Policy Definition Language IBM Aglets Resources, Permissions and Principals Resources include (File, Network, AWT, System) Principals include User Id, Resident Id and BondId Permissions differ from Resource to Resource. for eg File - read, write,delete. Network - connect,accept, reject.

Policy Language Cont’d Attribute Certificate Policy Certificate (Trusted Principal, Guest Principal, Un-trusted Principal)

Permission Set & Policy Engine Permission Set Algorithm to calculate permission set Inputs: Attribute Cert & Policy Certificate. Output: Permission set which determines the access level for the agent. Policy Engine Enforces the computed permission set will use the java security framework to restrict access to resources

JVM Implementation Agent Attribute Cert Policy Cert Logic Host Policy Engine

Literature Privilege Management Scheme for Mobile Agents – W.A.Jensen A Security Model For Aglets – Gunter Karjoth, Danny Lange & Mitsuru Oshima Akenti Policy Language – Mary Thomson www-itg.lbl.gov/Akenti/Papers/PolicyLanguage.pdf Certificate Based Access Control for Widely Distributed Resources – S Mudumbai, Mary Thomson, W Johnston et all on.pdf