Changes between Version 14 and Version 15 of TIEDCredentials

Timestamp:

05/13/13 18:56:46 (11 years ago)

Author:

faber@isi.edu

Comment:

--

TIEDCredentials

@@ -75 +75 @@
 
 {{{
-AM.privilege(Target) <- Issuer.privilege(Target)
+AM.privilege(Target, Principal) <- Issuer.privilege(Target, Principal)
 }}}
 
@@ -81 +81 @@
 
 {{{
-AM.resolve(Target) <- Issuer.resolve(Target)
-AM.info(Target) <- Issuer.info(Target)
+AM.resolve(Target, Principal) <- Issuer.resolve(Target, Principal)
+AM.info(Target, Principal) <- Issuer.info(Target, Principal)
 }}}
 
+The Principal argument to the privilege attribute allows requesters to differentiate between a principal acting for themself and a tool acting for another principal.  If a tool T submits a request asserting that it speaks for principal P the AM would ask the ABAC prover to prove that AM.privilege(Target, P) is true of principal T.  If that attribute is provable about T the speaks for is in effect.
 
 Issuers, such as Slice Authorities and Clearinghoses, issue credentials to users.  Here we describe how libabac will translate a credential into multiple ABAC statements inside the prover.
@@ -91 +92 @@
 
 {{{
- (1) Issuer.privilege(Target) <- Issuer.speaks_for(P)
+ (1) Issuer.privilege(Target, P) <- Issuer.speaks_for(P)
  (2) Issuer.speaks_for(P) <- P
- (3) Issuer.speaks_for(P) <- P.speaks_for(P)
+ (3) Issuer.speaks_for(P) <- Issuer.TrustedTool & P.speaks_for(P)
 }}}
 
-These ABAC statements mean: (1) The Issuer says that anyone that speaks for P has the privilege.  (2) The Issuer says P speaks for itself.  (3) The Issuer says that anyone P says speaks for P speaks for P.  When an Issuer hands out a GENI credential assigning {{{privilege}}} with respect to Target, it is making those three statements in ABAC.  The first line is repeated for each privilege in the credential; the last two are added to the prover once per credential.
+These ABAC statements mean: (1) The Issuer says that anyone that speaks for P can exercise the privilege as P (the second parameter).  (2) The Issuer says P speaks for itself.  (3) The Issuer says that anyone that the Issuer believes is a trusted tool and that P says speaks for P speaks for P.  When an Issuer hands out a GENI credential assigning {{{privilege}}} with respect to Target, it is making those three statements in ABAC.  The first line is repeated for each privilege in the credential; the last two are added to the prover once per credential.
 
 When a user (P) issues a speaks-for credential for a tool (T), that credential is translated into ABAC as:
@@ -108 +109 @@
 To be concrete: if (in GENI terms) 
  * AM trusts Issuer about {{{resolve}}} on {{{Target}}}
- * Issuer has handed P a GENI credential assigning {{{resolve}}} on {{{Target}}}
+ * Issuer has handed P a GENI privilege credential assigning {{{resolve}}} on {{{Target}}}
  * P has issued a "speaks-for" credential to tool T
+ * The issuer trusts tool T
  * T makes a request including both credentials
 
@@ -120 +122 @@
 Issuer.speaks_for(P) <- P.speaks_for(P)                      /* From Issuer GENI privilege credential */
 P.speaks_for(P) <- T                                         /* From User GENI privilege credential (speaks_for) */
+Issuer.TrustedTool <- T                                      /* Separate TrustedTool ABAC credential */
 }}}
 
@@ -133 +136 @@
 
 {{{
-Issuer.privilege(Target) <- Issuer.can_delegate_privilege(Target).privilege(Target)
-Issuer.can_delegate_privilege(Target) <- P
+Issuer.privilege(Target, P) <- Issuer.can_delegate_privilege(Target, P).privilege(Target, P)
+Issuer.can_delegate_privilege(Target, P) <- P
 }}}