Enforcing Policies in Pervasive Environments (2004)
| Venue: | In Mobile and Ubiquitous Systems, MobiQuitous-2004 |
| Citations: | 14 - 2 self |
BibTeX
@INPROCEEDINGS{Korolev04enforcingpolicies,
author = {Vlad Korolev and Lalana Kagal and Anupam Joshi},
title = {Enforcing Policies in Pervasive Environments},
booktitle = {In Mobile and Ubiquitous Systems, MobiQuitous-2004},
year = {2004},
pages = {299--308},
publisher = {IEEE Computer Society}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper presents an architecture and a proof of concept implementation of a security infrastructure for mobile devices in an infrastructure based pervasive environment. The security infrastructure primarily consists of two parts, the policy engine and the policy enforcement mechanism. Each mobile device within a pervasive environment is equipped with its own policy enforcement mechanism and is responsible for protecting its resources. A mobile device consults the nearest policy server, notifies its current state including its present user, network presence, other accessible devices and location information if available. Using this information the policy server queries the “Rei ” engine to dynamically create a policy certificate and issues it to the requesting device. The system wide policy is described in a semantic language “Rei”, a lightweight and extensible language which is able to express comprehensive policies using domain specific information. The “Rei”policy engine is able to dynamically decide what rights, prohibitions, obligations, dispensations an actor has on the domain actions. A policy certificate is created and issued to the device. The policy certificate contains a set of granted permissions and a validity period and scope within which the permissions are valid. The policy certificate can be revoked by the policy enforcer based on expiration of the validity period or a combination of timeout, loss of contact with an assigned network. X.509 based Public Key Infrastructure is used to provide identification and authentication.
Keyphrases
pervasive environment policy certificate validity period mobile device policy enforcement mechanism policy server security infrastructure accessible device present user network presence semantic language rei concept implementation domain specific information comprehensive policy requesting device rei engine extensible language domain action public key infrastructure system wide policy mobile device consults rei policy engine policy engine current state policy enforcer location information granted permission assigned network
