Authentication in Distributed Systems: Theory and Practice

Authentication in Distributed Systems: Theory and Practice (1991)

Cached

Download Links

by Butler Lampson , Martin Abadi , Michael Burrows , Edward Wobber

Citations:

BibTeX

@MISC{Lampson91authenticationin,
    author = {Butler Lampson and Martin Abadi and Michael Burrows and Edward Wobber},
    title = { Authentication in Distributed Systems: Theory and Practice},
    year = {1991}
}

Bookmark

OpenURL

Abstract

We describe a theory of authentication and a system that im-plements it. Our theory is based on the notion of principal and a “speaks for ” relation between principals. A simple principal either has a name or is a communication channel; a compound principal can express an adopted role or delegation of authority. The theory explains how to reason about a principal’s authority by deducing the other principals that it can speak for authenticating a channel is one important application, We use the theory to explain many existing and proposed mechanisms for security. In particular, we describe the system we have built. It passes principals efficiently as arguments or results of remote procedure calls, and it handles public and shared key encryption, name lookup in a large name space, groups of principals, loading programs, delegation, access control, and revocation.

Citations

2507	A method for obtaining digital signatures and public-key cryptosystems - Rivest, Shamir, et al.
2292	New directions in cryptography - Diffie, Hellmen - 1976
1040	R.: A logic for authentication - Burrows, Abadi, et al. - 1989
783	Using encryption for authentication in large networks of computers - Needham, Schroeder - 1978
741	End-to-end arguments in system design - Saltzer, Reed, et al. - 1984
478	A lattice model of secure information flow - DENNING - 1976
325	The MD4 message digest algorithm - RIVEST - 1991
315	A calculus for access control in distributed systems - Abadi, Burrows, et al. - 1993
131	Security mechanisms in high-level network protocols - VOYDOCK, KENT - 1983
108	Proxy-based authorization and accounting for distributed systems - NEUMAN - 1991
84	An Architecture for Practical Delegation in a Distributed System - Gasser, McDermott - 1990
60	SPX : Global authentication using public key certificates - J, ALAGAPPAN - 1991
55	Authentication and delegation with smart-cards - KAUFMAN - 1991
21	Exponentiation cryptosystems on the - COMBA - 1990
18	Network security via private-key certificates - D, SWICK - 1990
11	A 1 Gbit/second GaAs DES chip - H, THACKER - 1992
6	cost outboard cryptographic support for SILS and SP 4 - HERBISON - 1990
3	Information Processing Systems --- Open Systems Interconnection --- The Directory Authentication Framework - CCITT
3	Kerberos: An authentication service for open network systems - C, SCHILLER - 1988
2	The Kerberos network authentication service - C, STEINER - 1990
2	Practical authentication for distributed systems - LINN - 1990
1	Global authentication without global trust - NEEDHAM - 1986
1	The Digital distributed sys - tem security architecture - KAUFMAN - 1989
1	Resource tradeoffs in fast long integer multi - plication - P, VUILLEMIN - 1990