Affiliation:
1. University of Novi Sad, Novi Sad, Serbia
2. University of Groningen, Groningen, The Netherlands
3. IMT School for Advanced Studies Lucca, Lucca, Italy
Abstract
Abstract
Protocols in distributed settings usually rely on the interaction of several parties and often identify the
roles
involved in communications. Roles may have a behavioral interpretation, as they do not necessarily correspond to sites or physical devices. Notions of
role authorization
thus become necessary to consider settings in which, e.g., different sites may be authorized to act on behalf of a single role, or in which one site may be authorized to act on behalf of different roles. This flexibility must be equipped with ways of controlling the roles that the different parties are authorized to represent, including the challenging case in which role authorizations are determined only at runtime. We present a typed framework for the analysis of multiparty interaction with dynamic role authorization and delegation. Building on previous work on conversation types with role assignment, our formal model is based on an extension of the
π
-calculus in which the basic resources are pairs channel-role, which denote the access right of interacting along a given channel representing the given role. To specify dynamic authorization control, our process model includes (1) a novel scoping construct for authorization domains, and (2) communication primitives for authorizations, which allow to pass around authorizations to act on a given channel. An authorization error then corresponds to an action involving a channel and a role not enclosed by an appropriate authorization scope. We introduce a typing discipline that ensures that processes never reduce to authorization errors, including when parties dynamically acquire authorizations.
Funder
European Cooperation in Science and Technology
Ministarstvo Prosvete, Nauke i Tehnološkog Razvoja
Publisher
Association for Computing Machinery (ACM)
Subject
Theoretical Computer Science,Software
Cited by
3 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. The link-calculus for open multiparty interactions;Information and Computation;2020-12
2. A calculus for modeling floating authorizations;Journal of Logical and Algebraic Methods in Programming;2019-10
3. A Calculus for Modeling Floating Authorizations;Formal Techniques for Distributed Objects, Components, and Systems;2018