Delegation logic

摘要: We address the problem of authorization in large-scale, open, distributed systems. Authorization decisions are needed electronic commerce, mobile-code execution, remote resource sharing, privacy protection, and many other applications. adopt trust-management approach, which "authorization" is viewed as a "proof-of-compliance" problem: Does set credentials prove that request complies with policy?We develop logic-based language, called Delegation Logic (DL), to represent policies, credentials, requests authorization. In this paper, we describe D1LP, monotonic version DL. D1LP extends logic-programming (LP) language Datalog expressive delegation constructs feature depth wide variety complex principals (including, but not limited to, k-out-of-n thresholds). Our approach defining implementing based on tractably compiling programs into ordinary logic (OLPs). This compilation enables be implemented modularly top existing technologies for OLP, example, Prolog.As provides concept proof-of-compliance founded well-understood principles programming knowledge representation. also logical framework studying delegation.