Formulating and Reasoning about Security Policies
Abstract
The goal of this project was to investigate the use of first-order logic for expressing security policies and reasoning about authorization, and to apply to logic for use with digital library and other applications. Major progress was made in (1) giving semantics to currently-used digital rights languages (XrML and ODRL); (2) understanding the limitations in expressive power of current languages; (3) identifying a fragment of first-order logic that is appropriate for reasoning about security (Lithium); and (4) providing an interface for expressing policies that nonexperts can use (Rosetta). Digital Rights Management is a major topic of interest both in industry and the military. This work - with its focus on precise semantics for policies, understanding the expressive power of languages actually used, and making digital rights languages more usable by nonexperts - thus has the potential for having a major impact.
Document Details
- Document Type
- Technical Report
- Publication Date
- Dec 01, 2004
- Accession Number
- ADA431396
Entities
People
- Joseph Halpern
Organizations
- Cornell University