Security analysis in SPKI/SDSI2.0
Geng Xiuhu · Journal of Beijing Jiaotong University · 2013
We get logic programs based on translating each policy statement in trust management system SPKI/SDSI2.0 into corresponding Datalog clauses. The minimal Herbrand model of Datalog program is used as the program's semantics, so the safety analysis model for SPKI/SDSI2.0 is defined and limit rulesof state transmission are formulated. The limit rules are realizable.Based on this model, the security properties in SPKI/SDSI2.0 are synthetically analyzed. As a result, simple safety can be resolved in polynomial time. To a specific right r,whether a SPKI/SDSI2.0 system state is reliable relies on and only relies on the set of trusted principals about right r. Moreover, the algorithm which searches all trusted principals to specific right in a given state is also presented.