ArXiv.org · 2006 · 34 citations · 13 references
ComputingComputer ScienceFormal MethodsKnowledge RepresentationProgramming LanguagesAccess ControlAuthorizationPolicy-based Access ControlSpecification LanguagesAccess AuthorizationAccess Control ReasoningAuthorization LanguagesAuthorization RulesFoundationPolicy Expressiveness
ODRL is a popular XML-based language for stating the conditions under which resources can be accessed legitimately. The language is described in English and, as a result, agreements written in ODRL are open to interpretation. To address this problem, we propose a formal semantics for a representative fragment of the language. We use this semantics to determine precisely when a permission is implied by a set of ODRL statements and show that answering such questions is a decidable NP-hard problem. Finally, we define a tractable fragment of ODRL that is also fairly expressive.
13
Design of a role-based trust-management framework
Ninghui Li, John C. Mitchell, William H. Winsborough · 2005 · 753 citations
Ninghui Li, Benjamin N. Grosof, Joan Feigenbaum · ACM Transactions on Information and System Security · 2003 · 427 citations
Binder, a logic-based security language
John DeTreville · 2005 · 284 citations
SD3: a trust management system with certified evaluation
Trevor Jim · 2002 · 273 citations