000000114 001__ 114
000000114 005__ 20130522141958.0
000000114 037__ $$aLERSSE-POSTER-2006-001
000000114 041__ $$aeng
000000114 100__ $$aQiang Wei
000000114 100__ $$aKonstantin Beznosov
000000114 100__ $$aMatei Ripeanu
000000114 245__ $$aCooperative Secondary Authorization Recycling
000000114 260__ $$c2006-09-01
000000114 520__ $$aAs distributed enterprise systems scale up and become increasingly complex their authorization infrastructures are facing new challenges. Conventional request-response authorization architectures become fragile and scale poorly to massive-scale enterprises. We describe a collaborative approach to address these problems. In our approach, each application in the enterprise system caches its previous-made authorizations at its secondary decision point (SDP). An SDP can not only resolve the local request in the future but also share their authorization ability with other SDPs. Our simulation results demonstrate that cooperative authorization recycling approach improves the availability of access control architectures. 
000000114 6531_ $$aCooperative
000000114 6531_ $$aCSAR
000000114 6531_ $$aSecondary Authorization
000000114 6531_ $$aRecycling
000000114 8560_ $$fqiangw@ece.ubc.ca
000000114 8564_ $$uhttp://lersse-dl.ece.ubc.ca/record/114/files/114.pdf$$yTransfer from CDS 0.99.7
000000114 909C4 $$pQiang Wei, Konstantin Beznosov, Matei Ripeanu, "Cooperative Approximate Authorization Recycling", Poster, 15th USENIX Security Symposium, August 2006.
000000114 980__ $$aPOSTER