Language based policy analysis in a SPKI Trust Management System

Abstract-- SPKI/SDSI is a standard for issuing authorization and name certificates. SPKI/SDSI can be used to implement a Trust Management System, where the policy for resource access is distributively specified by multiple trusted entities. Agents in the system need a formal mechanism for understanding the current state of policy. We present a first order temporal logic, called FTPL for specifying properties of a given SPKI/SDSI policy state. We also present algorithms to check if a SPKI/SDSI policy state satisfies a property specified in FTPL.

• Type: Journal
• Year: 2006
• Where: JCS
• Authors: Arun K. Eamani, A. Prasad Sistla
• Keywords: JCS 2006, Multiple Trusted Entities, Policy, Trust Management System