Abstract: We extend the logic and semantics of authorization due to Abadi, Lampson, et al. to support restricted delegation. Our formal model provides a simple interpretation for the variety of constructs in the Simple Public Key Infrastructure (SPKI), and lends intuition about possible extensions. We discuss both extensions that our semantics supports and extensions that it cautions against.
Keywords: security, distributed computing
Copyright © 2000 by the authors.
See also earlier version howell:calculus-tr.
See also later version howell:spki.