Overview
Project Management
Documentation
Project Participants
Download the code
Related Projects
Private Project Notes
|
Akenti is a security model and architecture that is
intended to provide scalable security services in highly distributed network
environments. The project goals are:
-
to achieve the same level of expressiveness of access control that would be
accomplished through a local human controller in the decision loop
-
to accurately reflect the existing policy: authority, delegation, and responsibility
present in these environments.
The approach makes use of:
-
digitally signed certificates capable of carrying:
-
user identity authentication
-
resource usage requirements ("use-conditions")
-
user attribute authorizations ("attribute certificates")
-
delegated authorization
-
authorization decisions split among on-line and off-line entities
|