Device-Enabled Authorization in the Grey System (2005)
| Venue: | In Proceedings of the 8th Information Security Conference (ISC’05 |
| Citations: | 55 - 14 self |
BibTeX
@INPROCEEDINGS{Bauer05device-enabledauthorization,
author = {Lujo Bauer and Scott Garriss and Jonathan M. Mccune and Michael K. Reiter and Jason Rouse and Peter Rutenbar},
title = {Device-Enabled Authorization in the Grey System},
booktitle = {In Proceedings of the 8th Information Security Conference (ISC’05},
year = {2005},
pages = {431--445},
publisher = {Springer Verlag LNCS}
}
Years of Citing Articles
OpenURL
Abstract
We describe the design and implementation of Grey, a set of software extensions that convert an off-the-shelf smartphone-class device into a tool by which its owner exercises and delegates her authority to both physical and virtual resources. We describe the software architecture and user interfaces of Grey, and then detail two initial case studies in which we have converted infrastructure to accommodate requests from Grey-enabled devices. The first is two floors (nearly 30,000 square feet) of office space, in which we are equipping over 65 doors for access control using Grey for a population of roughly 150 persons. The second is modifications to Windows XP that permit login via Grey-enabled phones. We provide preliminary evaluations of these efforts and directions for research to further the vision of a unified authorization framework for both physical and virtual resources.







