Federation Web: a scheme to compound authorization chains on large-scale distributed systems

• Published in: 22nd International Symposium on Reliable Distributed Systems, 2003. Proceedings pp. 66 - 75
• Main Authors: Santin, A.O., da Silva Fraga, J., Siqueira, F., de Mello, E.R.
• Format: Conference Proceeding
• Language: English
• Published: IEEE 2003
• Subjects: Authentication; Authorization; Automation; Computer science; Computer security; Internet; Joining processes; Large-scale systems; Public key; Scalability
• ISBN: 0769519555; 9780769519555
• ISSN: 1060-9857; 2575-8462
• DOI: 10.1109/RELDIS.2003.1238056

Traditional security systems are not easily scalable and can become single points of failure or performance bottlenecks when used on a large-scale distributed system such as the Internet. This problem occurs also when using a public key infrastructure (PKI) with a hierarchical thrust model. SDSI/SPKI is a PKI that adopts a more scalable trust paradigm, which is focused on the client and based on authorization chains. However, the task of locating the chain that links a client to a server is not completely addressed by SDSI/SPKI. Aiming to overcome this limitation, the paper proposes extensions to the SDSI/SPKI authorization and authentication model. The proposed approach introduces the concept of Federation Webs, which allows the client to build new authorization chains linking it to a server when a direct path does not exist. A prototype implementation of this proposal has shown promising results.