The DOI matches its Crossref record; 10 of the 10 references it cites were found in a registry or an index.
Access control meets public key infrastructure, or: assigning roles to strangers
Abstract
The Internet enables connectivity between many strangers: entities that don't know each other. We present the Trust Policy Language (TPL), used to define the mapping of strangers to predefined business roles, based on certificates issued by third parties. TPL is expressive enough to allow complex policies, e.g. non-monotone (negative) certificates, while being simple enough to allow automated policy checking and processing. Issuers of certificates are either known in advance, or provide sufficient certificates to be considered a trusted authority according to the policy. This allows bottom-up, "grass roots" buildup of trust, as in the real world. We extend, rather than replace, existing role based access control mechanisms. This provides a simple, modular architecture and easy migration from existing systems. Our system automatically collects missing certificates from peer servers. In particular this allows use of standard browsers, which pass only one certificate to the server. We describe our implementation, which can be used as an extension of a Web server or as a separate server with interface to applications.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
A Extensible Markup Language XML
(2009) · Foundations of Semantic Web Technologies · doi:10.1201/9781420090512-18 · Cited by 4,824
Foundations of Logic Programming
Lloyd, J. W. (1984) · Springer eBooks · doi:10.1007/978-3-642-96826-6 · Cited by 4,128
Foundations of Logic Programming
Lloyd, J. W. (1987) · Springer eBooks · doi:10.1007/978-3-642-83189-8 · Cited by 2,736
Decentralized Trust Management
Blaze, M., Feigenbaum, J., & Lacy, J. (1996) · Cited by 1,870
Decentralized trust management
Blaze, M., Feigenbaum, J., & Lacy, J. (2002) · Proceedings 1996 IEEE Symposium on Security and Privacy · doi:10.1109/secpri.1996.502679 · Cited by 974
Zimmermann, P. R. (1996) · Cited by 889
Role-Based Access Control (RBAC): Features and Motivations | NIST
Ferraiolo, D. F., Cugini, J. A., & Kuhn, D. R. (1995) · Annual Computer Security Applications Conference · Cited by 567
REFEREE: trust management for Web applications
Chu, Y.-H., Feigenbaum, J., LaMacchia, B., Resnick, P., & Strauss, M. (1997) · Computer Networks and ISDN Systems · doi:10.1016/s0169-7552(97)00009-3 · Cited by 311
A logic-based knowledge representation for authorization with delegation
Li, N., Feigenbaum, J., & Grosof, B. N. (2003) · IEEE Computer Security Foundations Workshop (CSFW) · doi:10.1109/csfw.1999.779771 · Cited by 100
KeyNote Trust Management System
Meifeng, S. (2002) · Jisuanji gongcheng · Cited by 35
Cited by
A survey of trust in internet applications
Grandison, T., & Sloman, M. (2000) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2000.5340804 · Cited by 1,157
The UCONABCusage control model
Park, J., & Sandhu, R. (2004) · ACM Transactions on Information and System Security · doi:10.1145/984334.984339 · Cited by 956
Design and implementation of the idemix anonymous credential system
Camenisch, J., & Van Herreweghen, E. (2002) · Proceedings of the 9th ACM conference on Computer and communications security · doi:10.1145/586110.586114 · Cited by 555
Delegation logic: A logic-based approach to distributed authorization
Li, N., Grosof, B. N., & Feigenbaum, J. (2003) · ACM Transactions on Information and System Security · doi:10.1145/605434.605438 · Cited by 425
Trust-based security for wireless ad hoc and sensor networks
Boukerch, A., Xu, L., & EL-Khatib, K. (2007) · Computer Communications · doi:10.1016/j.comcom.2007.04.022 · Cited by 290
Metadata
- Authors
- Herzberg, A., Mass, Y., Mihaeli, J., Naor, D., & Ravid, Y.
- Venue
- Proceeding 2000 IEEE Symposium on Security and Privacy. S&P 2000
- Publisher
- IEEE Comput. Soc
- Published
- 2002-11-07
- Pages
- 2-14
- OpenAlex
- W2113467413
- Cited by
- 388
- References
- 10
- FWCI
- 71.95
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Access control meets public key infrastructure, or: assigning roles to strangers. https://app.cochat.ai/papers/10.1109/secpri.2000.848442
- The paper
- Herzberg, A., Mass, Y., Mihaeli, J., Naor, D., & Ravid, Y. (2002). Access control meets public key infrastructure, or: assigning roles to strangers. Proceeding 2000 IEEE Symposium on Security and Privacy. S&P 2000. https://doi.org/10.1109/secpri.2000.848442
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
