Design of A Role-based Trust-management Framework

Authors: Ninghui Li, John C. Mitchell, and William H. Winsborough


We introduce the RT  framework, a family of Role-based Trust-management languages for representing policies and credentials in distributed authorization. RT  combines the strengths of role-based access control and trust-management systems and is especially suitable for attribute-based access control. Using a few simple credential forms, RT  provides localized authority over roles, delegation in role definition, linked roles, and parameterized roles. RT  also introduces manifold roles, which can be used to express threshold and separation-of-duty policies, and delegation of role activations. We formally define the semantics of credentials in the RT  framework by presenting a translation from credentials to Datalog rules. This translation also shows that this semantics is algorithmically tractable.

In Proceedings of 2002 IEEE Symposium on Security and Privacy, pages 114--130. IEEE Computer Society Press, May 2002.

Paper: PDF.

Slides: PDF.

BibTex Data:

  author =       "Ninghui Li and John C. Mitchell and William H. Winsborough",
  title =        "Design of a Role-Based Trust Management Framework",
  booktitle =    "Proceedings of the 2002 IEEE Symposium on Security and Privacy",
  publisher =    "IEEE Computer Society Press",
  month =        may,
  pages =        "114--130",
  year =         "2002",

Back to Ninghui's publications, Ninghui's home page.