1. Access Control Model For Distributed Object System With Mobile Agents Mid Term Presentation John Melvin Antony

2. The Big Picture

3. The Modules Access Control Mechanism - Certificates Policy Definition Language Permission Set Policy Engine Implementation

4. Certificates Policy Certificate & Attribute Certificate Certificate Structure. - XML - DTD - Contents(User Id, Resident Id, Bond Id, Validity, Policy definition Language)

5. Policy Definition Language IBM Aglets Resources, Permissions and Principals Resources include (File, Network, AWT, System) Principals include User Id, Resident Id and BondId Permissions differ from Resource to Resource. for eg File - read, write,delete. Network - connect,accept, reject.

6. Policy Language Cont’d Attribute Certificate Policy Certificate (Trusted Principal, Guest Principal, Un-trusted Principal)

7. Permission Set & Policy Engine Permission Set Algorithm to calculate permission set Inputs: Attribute Cert & Policy Certificate. Output: Permission set which determines the access level for the agent. Policy Engine Enforces the computed permission set will use the java security framework to restrict access to resources

8. JVM Implementation Agent Attribute Cert Policy Cert Logic Host Policy Engine

9. Literature Privilege Management Scheme for Mobile Agents – W.A.Jensen http://www.acsac.org/2001/papers/121.pdf A Security Model For Aglets – Gunter Karjoth, Danny Lange & Mitsuru Oshima www.moe-lange.com/danny/agletsecurity.pdf Akenti Policy Language – Mary Thomson www-itg.lbl.gov/Akenti/Papers/PolicyLanguage.pdf Certificate Based Access Control for Widely Distributed Resources – S Mudumbai, Mary Thomson, W Johnston et all http://www.usenix.org/events/sec99/full_papers/thompson/thomps on.pdf