Pesto flavoured security

F.W. Dillema; Tage Stabell-Kulo; Tage Stabell-Kulo

Pesto flavoured security

F.W. Dillema, Tage Stabell-Kulo, Tage Stabell-Kulo

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

46 Downloads (Pure)

Abstract

We demonstrate that symmetric-key cryptography can be used for both read and write access control. One-time write access can be granted by handing over an encryption key, and our encryption framework allows the revocation of previously granted rights. The number of keys to be managed explicitly grows linearly with the number of access control policies a user defines, making security manageable. The framework is used in the Pesto distributed storage system. In Pesto, policies can be stored the same as other data and the same mechanism can be used to control access to them. Delegation of authority over policies concerning different tasks can then be performed. Separating the different tasks of the system, allows for different tasks to be assigned to different sets of nodes. Nodes need then only be trusted wrt. the specific task(s) they have been assigned with.

Original language	Undefined
Title of host publication	22nd Symp. on Reliable Distributed Systems (SRDS)
Place of Publication	Los Alamitos, California
Publisher	IEEE
Pages	241-249
Number of pages	9
ISBN (Print)	0-7695-1955-5
Publication status	Published - Oct 2003
Event	22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003 - Florence, Italy Duration: 6 Oct 2003 → 8 Oct 2003 Conference number: 22

Publication series

Name
Publisher	IEEE Computer Society Press Los Alamitos, California

Conference

Conference	22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003
Country/Territory	Italy
City	Florence
Period	6/10/03 → 8/10/03

Keywords

IR-41379
METIS-214066
EWI-824

Access to Document

Cite this

@inproceedings{6c9f77160de94534866a3f45766f86be,

title = "Pesto flavoured security",

abstract = "We demonstrate that symmetric-key cryptography can be used for both read and write access control. One-time write access can be granted by handing over an encryption key, and our encryption framework allows the revocation of previously granted rights. The number of keys to be managed explicitly grows linearly with the number of access control policies a user defines, making security manageable. The framework is used in the Pesto distributed storage system. In Pesto, policies can be stored the same as other data and the same mechanism can be used to control access to them. Delegation of authority over policies concerning different tasks can then be performed. Separating the different tasks of the system, allows for different tasks to be assigned to different sets of nodes. Nodes need then only be trusted wrt. the specific task(s) they have been assigned with.",

keywords = "IR-41379, METIS-214066, EWI-824",

author = "F.W. Dillema and Tage Stabell-Kulo and Tage Stabell-Kulo",

note = "Imported from DIES; 22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003 ; Conference date: 06-10-2003 Through 08-10-2003",

year = "2003",

month = oct,

language = "Undefined",

isbn = "0-7695-1955-5",

publisher = "IEEE",

pages = "241--249",

booktitle = "22nd Symp. on Reliable Distributed Systems (SRDS)",

address = "United States",

}

TY - GEN

T1 - Pesto flavoured security

AU - Dillema, F.W.

AU - Stabell-Kulo, Tage

N1 - Conference code: 22

PY - 2003/10

Y1 - 2003/10

N2 - We demonstrate that symmetric-key cryptography can be used for both read and write access control. One-time write access can be granted by handing over an encryption key, and our encryption framework allows the revocation of previously granted rights. The number of keys to be managed explicitly grows linearly with the number of access control policies a user defines, making security manageable. The framework is used in the Pesto distributed storage system. In Pesto, policies can be stored the same as other data and the same mechanism can be used to control access to them. Delegation of authority over policies concerning different tasks can then be performed. Separating the different tasks of the system, allows for different tasks to be assigned to different sets of nodes. Nodes need then only be trusted wrt. the specific task(s) they have been assigned with.

AB - We demonstrate that symmetric-key cryptography can be used for both read and write access control. One-time write access can be granted by handing over an encryption key, and our encryption framework allows the revocation of previously granted rights. The number of keys to be managed explicitly grows linearly with the number of access control policies a user defines, making security manageable. The framework is used in the Pesto distributed storage system. In Pesto, policies can be stored the same as other data and the same mechanism can be used to control access to them. Delegation of authority over policies concerning different tasks can then be performed. Separating the different tasks of the system, allows for different tasks to be assigned to different sets of nodes. Nodes need then only be trusted wrt. the specific task(s) they have been assigned with.

KW - IR-41379

KW - METIS-214066

KW - EWI-824

M3 - Conference contribution

SN - 0-7695-1955-5

SP - 241

EP - 249

BT - 22nd Symp. on Reliable Distributed Systems (SRDS)

PB - IEEE

CY - Los Alamitos, California

T2 - 22nd IEEE Symposium on Reliable Distributed Systems, SRDS 2003

Y2 - 6 October 2003 through 8 October 2003

ER -