Privacy-preserving Policy-driven Access Control with Mixed Credentials

Nov 16, 2005

Download: MP4 Video Size: 105.9MB  
Watch on YouTube

Abstract

Access control in decentralized systems is
an important problem that has not been fully understood,
except perhaps that it should be based on credentials.
There are mainly two research approaches towards
this goal: one is to pursue powerful individual credentials yet without
necessarily considering flexible access control policies,
the other is to consider flexible policies yet without necessarily
accommodating the useful credential schemes that have become available.
This paper proposes a unified approach that simultaneously consider
flexible policies and useful credentials.
A first realization of this approach is the notion of assembly signatures
(and identifications), which are:
(1) privacy-preserving, meaning that the access requestor's privacy is
ensured; (2) policy-driven, meaning that the validity of a signature is
with respect to a given access control policy;
(3) ``mixed credentials"-based, meaning that a signature
is constructed out of various anonymous and non-anonymous credentials.

(This is a joint work with Moti Yung)