Dealing with Multi-Policy Security in Large Open Distributed Systems

(1)

HAL Id: inria-00073578

https://hal.inria.fr/inria-00073578

Submitted on 24 May 2006

HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub-

L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non,

Distributed Systems

Christophe Bidan, Valérie Issarny

To cite this version:

Christophe Bidan, Valérie Issarny. Dealing with Multi-Policy Security in Large Open Distributed Systems. [Research Report] RR-3112, INRIA. 1997. �inria-00073578�

(2)

a p p o r t

d e r e c h e r c h e

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE

Dealing with Multi-Policy Security in Large Open Distributed Systems

Christophe Bidan & Val´erie Issarny

N ˚ 3112

F´evrier 1997

TH `EME 1

(3)

(4)

4!567()897':;$<"95=>?5

@BACDFEGIH*JA7K3LDNMOQPSRUTVOWYXKZCDFK\[]EEIOQCP=^

_#`=a

bcdbBefhg9ibjkblnmpo<b!qjkrpjsq

a

bcdbtj

u)vwYx

bqzy wn{}|}~pwv

g'ln

wnv

q ~ b v bt

` b v `

bVeneIfib

v|

b v

enfhnBlYbj

&7nn

vw

cUq

`

bjkb!m vk|

qsr

wn|

Zq wY

| b.

w

b

` l { {

bnb

¡wnv

q

wp~

lIr*¢j

~p|

jsq vk|}£

mpqb

~ l v¥¤

`|

qb]qm

v

bj

|

j.q

w

j¥m

wv

q |

Zqkb vkw

b

v

lYq

|}w

£

b!qs¦bb-ln

{}|

lq

| w

j v b {r |

w

~p|¨§

b v bZqV

w

jj

| £{

r

|

w

j

|

j¥qkbZqzjkbm v|

qsr<

wn{}|

| bj©

_#`|

jlYQb v

vkw

w j¥btjl

v

ln]q

|

l

{

ln

vw

l

`¡wv~

btl {}|

|q` q `

b&

w

b!o

|

j¥qkb!b wY'~p| §

b v bq

jkbm v|

qsrª

w{ |

| bj

|

~p|

jsq vk|}£

mpqb

~ l v

`|

qb]qm

v

bj©«3b

|

Zq vw~

m!bVl&c w~

b

{7¡wnv

j¥Qb

|¨

r |

9jkbm v|

qsr

wn{}|

| bj

|

qb

v

cdj wY

jkb!m vk|

qsr

~w

c¬l

|

jln

~

ln!btjkj'

w

Zq vwn{6v

m { bj©

_#`

b=*b

|®~

bq

|¨

rªq

`

bVjkb!q wn

w

b

v

lYq wv

j

¡wnv

w c

£|

|

Bq

`

b.jkbt

| ¯

lYq

|}w

j wn

jkm

£p¤

w{ |

| bj#ln

~

¦b.l

~~v

btjkjq

`

b°l { |®~p|

qsr wY

q` b

v

bjkm {q |

d

w{ |

!r9ln

wnv~p|

Vq w q `

bjkbm v|

qsr¬

vw

Qb v q|

bj wn

q ` bj¥m

£p¤

wn{}|

| bj©

±²Z³*´µV¶ ·7n ¸

!bjjª

w

Zq vkw{

wn{}|

rn

|

¡wv

c¬lq

| w

º¹

w

»

wn{}|

rncVm {q

| ¤

wn{}|

| bj

w

p¹

|

]q

|

wn{}|

| bj©

¼®½B¾

¿kÀFÁtÂ

¾

¿Ã7Ä}ÀÆÅFÇ!È

(5)

² ²

mS

w|

Zq

~

bmb

~ b {

l-jpibm v|

qib |

¡wnv

cdlYq

|

mbn

{

bjªl v

`|

qkbt]qkm

v

btj

~p|

jsq vk|}£

m#ibbj

l]qmb {}{

btj

~pw|

bZq)

w

m

w| v

j¥m

wv

qb v){

¢|

Zqkb vkw

¦ib v lq

| w

Vbq

v

blY

{}|

lq

| w

j v b {

blYZq

~

b

w{ |

q

|

mbj

~ b jibt!m v|

qib

~p|¨§

i

b v

bqbj bbZqkmbi { {

bcdbqz

w

Zq v l

~p|

]q wn|}v

btj©

b.ln

|b v vw

w

jkb mb.lY

vkw

` b v lq

|

mb w m v q v l | qb

vz{

l¬

w

b!o

|

jsqbb

~ b

~p|¨§

i

b v bqbj¦

wn{}|¨¤

q

|

mbtj

~

b¦jibt!m v|

qib ~

lnj7mb#l v

`|

qb!qkm v b

~p|

jsq vk|}£

m#ibbn©

w

mj

|

Zq vwp~

m |j w

j mVc wp~ a

b { bb

v

cdb!qkqlnq

~

b)j¥#ib

| ¯

b v { btj

w{ |

q

|

mbj

~ b jpibm v|

qib b°qkb

v

cdbj

~ b

~pw

c¬l

|

btj

~

b)jpibm v|

qib bq

~ b vta

b

{

bj

~

b)

w

Zq vwn{

b

~ ¢l

a

bj©

w

mj

|}~

bZq

| ¯w

j7l { wv

j7mBbj¥bc

£{

b ~ ¢w

#ib v lYqkbm

v

j6

w m v w c

£|

b v{

bjjk¦ib

|¨¯

lq

| w

j

~

bj

j w mj

¤ w{ |

q

|

mbjb!qz

w

mj#

w

mj

|

Zqib v btjkj

w

j

a

l { lBl

{}|®~p|

qib ~ b { l

w{ |

q

|

mb v ibjkm

{

qlYZqb

|j

¤!a

l ¤ |j ~ bj

vkw

vk|

i

bqibtj

~

bjpibm v|

qib ~ btjzj

w

mj

¤ wn{}|

q

|

mbtj©

¶ t ´ ² uw{ |

q

|

mb

~

bd

w

Zq vwn{

b ~ ¢l

a

bj w{ |

q

|

mb

~

b¬

w

Zq vw{

b ~

bB¹mpo 6cm {q

|¨¤

wn{}|

q

|

mbtj

w

p¹

|

qzbZq

v

b.

wn{}|

q

|

mbtj©

(6)

: ; B7(&:\ ¦!B

<

£x

b]q

¤F£

lnjkb

~&~|

j¥q v| £

mpqkb

~ w

cdmpq

|

dl v

`|

qb]qm

v

bj(=

{}|?>

b

<

gA@

¸CB w

cdc w <

£px

bt]q'gzb

mbtjsq

@

vwD>

b v ¸ v

`|

qb]qm

v

bFE

~ b ¯

b

~£

rq

` b <

£px

bt]qHG\lnlYbcdbZqHI vkw

m

B<

GJIKELZNMF lY

~ q` b _ b ¤

{

b

w

cdcVm

|

lq

| w

POZqkb { {}|

nbZq b!qs

wnvQ>

¸ v

`|

qb!qkm

v

b¬

vw

w jkb

~£

rq

` b _ O ¸ w

j wnv

q | mcRLn8M

l v bV

vkw

c |j |

&lY

vkw

ln

`

btj#q

w

j¥m

wv

q {l v

b

w

Qb

~|

j¥q v| £

mpqkb

~

j¥rpj¥qkbcdj©SI w l {j

wn

q` btj¥bBl

v

`|¨¤

qb!qkm

v

bj

|

{m ~ b |

Zqb vw

Qb v l

£|}{ |

qsr

£

bqsbb9j wY

qs#l

v

b

w

cd

w

bqj

| `

b!qkb vkw

nbb

w

mj

~|

j¥q v| £

mpqkb

~

b

|}vw

cdbZqj=

` b v

bd

w

cd

w

bqj c¬lIrlYQbl

v

lY

~3~p|

jklnQbl v~

rZlYc

|

l {}{

r6lnj°q

` b v

bjkm {q

wn

|

~p|

|}~

ml

{

ln

~

lYmq w w c w

mj.l]q

| w

j©9

vw

c q ` b&jkbm

vk|

qsr

wn|

Zq wY

| b.=q

` b |

qb vw

Qb v l

£|}{}|

qsr

vkw

c w qkb

~¬£

r¬q

`

b.l

£w

bl v

`|

qkbt]qkm

v

btjj¥q

v

bjj¥btj)q

`

b.

w

cB

{

bo

|

qsr wY

j¥bt!m v|

qsr¬

wn{}|

| bj¦

`|

`&`

lIb

q

w£

b | cd

{

bcdbZqb

~

L¨e8T*e8MÆplnj¦b { {

lnjq

`

bb!btjkj

|

qsrq w w

Qb

|q ` q `

b°

w

bo

|

j¥qkb!b wY

cm {q | {b

jkbm v|

qsrd

wn{}|

| btj©

_#`|

j#

w

b!o

|

jsqbb

v

bjkm

{

qj

¡vw

c q ` b |

Zqkb vkw

b

v

lYq

|}w

£

b!qs¦bb9jkrpjsqbc¬j Bwnv

j

wn

q¤

#l

v

b¬

w

cB

w

bZqjE

`

lI

|

~|¨§

b v

bZqVjkb!m vk|

qsr v b m

|}v

bcBbZqj=

w

jkj

|}£{

r3lq

~p| §

b v bZq

v

lYm {l

v|

qsr

{

bb

{

j©

wnv

bIl

{

mlq

|

dq

`

bjkbm vk|

qsr wnw

b

~p|

jsq vk|}£

mpqb

~

jkrj¥qkbc¬j

2&&'(!UWVX&'2

j

`w

m

{®~9£

bVl

£{

b

q

w.v

btlnj

w

Bl

£Qw

mpq)q

` b

9Y/02( VwY

q ` b |

Zqb vw

Qb

v

lq

|

.jkrj¥qkbc¬j¢Yjkbm vk|

qsrV

wn{}|

|

bj© «3b

|}~

bZq

|

r

qs

w&~p| §

b v bZq ln

vw

l

`

bj

¡wv

q ` bB

w

cd

w j |q

| w

wY

jkbm vk|

qsrª

w{ |

| bjNZ

/0 &! [5&'\/0&'\

lY

~

/]^ "!_9`4& 7

©Xaj

|

3

w{ |

!r

|

Zqkb vkw

b

v

lYq

|}w

=q

`

b

w

cB

w

jkb

~ w{ |

!rj

`w

m

{®~

w qd

|}wn{

lqb

q ` b&jkbm

vk|

qsr wn

q ` b&jkm

£p¤

wn{}|

| btjlY

~ j

`w

m

{}~

ml

v

lYZqbbBq

` b

| v

lYmpq w w

cVr_L e&bDMF©

<

3q

` b w q ` b v

`

lY

~

|q ` w{ |

!r w c

£|

lYq

|}w

=7q

`

bª

w

cd

w

j¥b

~ w{ |

!r c¬lIr

£ b |

w

j

|

jsqbZqV

|q

`£w

q ` jkm

£p¤

wn{}|

| bj

£

mpqBcmj¥q

£

b9jkb!m

v b | q `

b&

|

b-

w

qsr3

w c

£|

lYq

|}w

-l { {}w

'j q w

w cd

w

jkb

w

p¹

|

]q

|

ª

wn{}|

| btj

|

lªjkb!m

v

bBlY

~ w

Zq vkw{ {

b ~

c¬lnb

v LMÆ©KO\q

`

bd

w

Zqkboq wY{

l v

b

w

b

~p|

j¥q v| £

mqkb

~ l v

`|

qkbt]qkm

v

btjI¦b¦ljkjkb

v

q6q

`

lq

w{ |

!r

w c

£|

lq

|}w

|j £ b!qkqkb

v

jkm

|

qkb

~ q`

lYV

wn{}|

!r

|

Zqkb vkw

b

v

lYq

|}w

=©dO q

`|

jlYQb

v

=¦b

|

Zq vwp~

m!b¬l9c w~

b { q ` lq

¡wnv

c¬j°q

` b £

lnj

|j

¡wnv~

bl {}|

9

|q `

jkbm v|

qsr

| `

bqkb vw

bb

w

mj

~p|

jsq vk|}£

mpqb

~ l v

`|

qb]qm

v

bj)l {}{ w

|

q

w

jkbt

|

r-lY

~ q w w c

£|

b9l

|®~

bzl v|

b!qsr wY

ln!btjkj

w

Zq vwn{

wn{}|

|

btj©eOdl v q |

!m {l v

Iq

`

bz

vkw

w j¥b

~ c wp~

b

{|

jmj¥b

m { q w

jkbm v|

qsr

wDf

!b v j £

r9jkm

{r |

¬lB

v

ln!q

|

l

{

jkb!q wn

w c

£|

lYq

|}w

w

Qb

v

lq wnv

j©

_#`|

j¦lYQb v¦|

j¦j¥q

v

m!qkm v b ~

lj

¡w{ {}w

'jNZ6q

`

bb!oq#jkb!q

|}w

<

v

btj¥bqj v b {

lqb

~ wnvQ>

lY

~ |

bj w m v

j¥qln

~ wn|

Zq

w

b v |

wn{}|

!rV

w

cd

w j |q

|}w

6©7ybt]q

|}w

d°

v

bjkbZqj w m v c

wp~

b

{¡wnv

q ` bzj¥Qb

|¨¯

lq

| w

wn

j¥q v|

!q ln!bjj

w

q vkw{

w{ |

| bj

B |q

`w

mq

w

j

|®~

b

vk|

|

¡wv

c¬lYq

|}w

¹

w

YE]©eOdl v q |

!m {l v |

q)

|

nbj

q ` bV

w q

|}w

wYg9Y/7?&h

ln

~i2& %6

w c

£|

lq

|}w

6©yb!q

|}w

Pb<b!oqkb

~

jq

`|

j°c w~

b { jw lnjzq

w9~

btl

{

|q ` w c

£|

lYq

|}w

wn |

¡wnv

c¬lq

|}w

<¹ w

wn{}|

| btj©

|

l {}{

rpb

~pv

lI j w cdb

w

{

mj

| w

j

|

ªj¥bt]q

| w

TBln

~ v

btj¥bq'm vkv

bZq'j¥qlqmjzlY

~&

mqkm

v

b.

wv\>

©

j k B1! z5mlYV(»! #"on > 8 °!

p l vk|}w

mj'c wp~

b {j ` lInb

£

bb

vw

w jkb

~|

wv~

b v q w9v

blj

w

\l

£Qw

mpq j¥bt!m v|

qsrª

wn{}|

| bj

B

bn©©} j¥bbln

w

b v |

b

wY

jkbm v|

qsrc wp~

b {j £ rq lY

~

b

`v

LY8MÆnq

`

bg@¦b { { ¤

q l u l ~ m { lc

wp~

b { LbMÆq

` b |

¡wv

c¬lq

| w

¹ w c wp~

b

{¡vkw

cr@

|b £ b v LNMF¦q

` b {l vQ>¤

«

|}{

j w c w~

b

{z¡wv

w cBcdb

v |l {

j¥bt!m v|

qsr

w

jsq v l |

Zqj

L8MÆ ln

~ q `

bG\Nq=blnc wp~

b { Ln8ME!©

_#`

bjkbdc wp~

b { j.l

v b |

Zq vw~

m!b

~ q w `

b

> `

bq

` b v

l9

wn{}|

!r

sutvw(xzy{8|%}|u~WFvyw(&y0wFF|h(w(F |u~uy }|u8} yv8Fy|W~uw(x8Fy8ev~5{8y|u~hy8v|}F|h|u}x8y8|

&y|uv~uw(88|u~hy|uK} F} y|ux}(Q