|
Published Articles >> Table of Contents >> Abstract
First Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services (MobiQuitous'04)
pp. 299-308
Enforcing Policies in Pervasive Environments
Anand Patwardhan, University of Maryland at Baltimore County
Vlad Korolev, University of Maryland at Baltimore County
Lalana Kagal, University of Maryland at Baltimore County
Anupam Joshi, University of Maryland at Baltimore County
Full Article Text:
  
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MOBIQ.2004.1331736
Send link to a friend
| Abstract |
|
This paper presents an architecture and a proof of
concept implementation of a security infrastructure for
mobile devices in an infrastructure based pervasive environment.
The security infrastructure primarily consists
of two parts, the policy engine and the policy enforcement
mechanism. Each mobile device within a pervasive
environment is equipped with its own policy enforcement
mechanism and is responsible for protecting
its resources. A mobile device consults the nearest policy
server, notifies its current state including its present
user, network presence, other accessible devices and location
information if available. Using this information
the policy server queries the "Rei" engine to dynamically
create a policy certificate and issues it to the requesting
device. The system wide policy is described in a
semantic language "Rei", a lightweight and extensible
language which is able to express comprehensive policies
using domain specific information. The "Rei" policy
engine is able to dynamically decide what rights, prohibitions,
obligations, dispensations an actor has on the
domain actions. A policy certificate is created and issued
to the device. The policy certificate contains a set
of granted permissions and a validity period and scope
within which the permissions are valid. The policy certificate
can be revoked by the policy enforcer based on
expiration of the validity period or a combination of
timeout, loss of contact with an assigned network.
|
 Additional Information
|
Citation:
Anand Patwardhan, Vlad Korolev, Lalana Kagal, Anupam Joshi,
"Enforcing Policies in Pervasive Environments,"
mobiquitous,
pp. 299-308,
First Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services (MobiQuitous'04),
2004
|
|
