Pesto flavoured security

F.W. Dillema, Tage Stabell-Kulo, Tage Stabell-Kulo

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    15 Downloads (Pure)


    We demonstrate that symmetric-key cryptography can be used for both read and write access control. One-time write access can be granted by handing over an encryption key, and our encryption framework allows the revocation of previously granted rights. The number of keys to be managed explicitly grows linearly with the number of access control policies a user defines, making security manageable. The framework is used in the Pesto distributed storage system. In Pesto, policies can be stored the same as other data and the same mechanism can be used to control access to them. Delegation of authority over policies concerning different tasks can then be performed. Separating the different tasks of the system, allows for different tasks to be assigned to different sets of nodes. Nodes need then only be trusted wrt. the specific task(s) they have been assigned with.
    Original languageUndefined
    Title of host publication22nd Symp. on Reliable Distributed Systems (SRDS)
    Place of PublicationLos Alamitos, California
    PublisherIEEE Computer Society
    Number of pages9
    ISBN (Print)0-7695-1955-5
    Publication statusPublished - Oct 2003
    Event22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003 - Florence, Italy
    Duration: 6 Oct 20038 Oct 2003
    Conference number: 22

    Publication series

    PublisherIEEE Computer Society Press Los Alamitos, California


    Conference22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003


    • IR-41379
    • METIS-214066
    • EWI-824

    Cite this