Access control is the process of mediating every request to resources and data maintained
by a system and determining whether the request should be granted or denied. The access …

Trust management systems are frameworks for authorization in modern distributed systems,
allowing remotely accessible resources to be protected by providers. By allowing providers …

Computational science applications are driving a demand for increasingly powerful storage
systems. While many techniques are available for capturing the I/O behavior of individual …

We describe a policy language designed for pervasive computing applications that is based
on deontic concepts and grounded in a semantic language. The pervasive computing …

Although several access control policies can be devised for controlling access to
information, all existing authorization models, and the corresponding enforcement …

Web-based applications greatly increase information availability and ease of access, which
is optimal for public information. The distribution and sharing of information via the Web that …

We address the problem of authorization in large-scale, open, distributed systems.
Authorization decisions are needed in electronic commerce, mobile-code execution, remote …

Despite considerable advancements in the area of access control and authorization
languages, current approaches to enforcing access control are all based on monolithic and …

A major drawback of existing access control systems is that they have all been developed
with a specific access control policy in mind. This means that all protection requirements (ie …

Emerging electronic commerce services that use public-key cryptography on a mass-market
scale require sophisticated mechanisms for managing trust. For example, any service that …