An Infrastructure for Authentication, Authorization and Delegation

30.06.2000

Abstract

Security infrastructures that concerns themselves with authentication, authorization and delegation easily incorporate security policies, both implicitly and explicitly. These inherent policies can interfer with the intended security policies of applications using the infrastructure.

This thesis designs and implements a security infrastructure that concerns itself with authentication, authorization and delegation in a distributed environment, where the inherent policies are kept as few and well-documented as possible. The infrastructure includes object format and storage, delegation, revocation, protocols, servers and clients. A test scenario is designed and implemented in order to test the infrastructure implementation, with favourable results.