摘要: We introduce a language for creating and manipulating certificates, that is, digitally signed data based on public key cryptography, system revoking certificates. Our approach provides uniform mechanism secure distribution of bindings, authorizations, revocation information. An external the description these other forms is compiled into an intermediate with well-defined denotational operational semantics. The internal used to carry out consistency checks security, optimizations efficiency. primary contribution technique treating dually sorts information using polarity discipline in language.