 |
 |
|
Fine-grained disclosure of access policies Ref:
Claudio A. Ardagna, Sabrina De Capitani
di Vimercati, Sara Foresti, Gregory Neven, Stefano Paraboschi, Franz-Stefan
Preiss, Pierangela Samarati, and Mario Verdicchio. Fine-grained disclosure
of access policies. In M. Soriano, S. Qing, J. López, editors,
12th International Conference on Information and Communications Security
- ICICS 2010, volume 6476 of Lecture Notes in Computer Science,
pages 16-30. Springer-Verlag, 2010. Abstract: In open scenarios, where servers may receive requests to access their services from possibly unknown clients, access control is typically based on the evaluation of (certified or uncertified) properties, that clients can present. Since assuming the client to know a-priori the properties she should present to acquire access is clearly limiting, servers should be able to respond to client requests with information on the access control policies regulating access to the requested services. In this paper, we present a simple, yet flexible and expressive, approach for allowing servers to specify disclosure policies, regulating if and how access control policies on services can be communicated to clients. Our approach allows fine-grain specifications, thus capturing different ways in which policies, and portions thereof, can be communicated. We also define properties that can characterize the client view of the access control policy. PDF
|
