Academic Commons

Articles

Secure and Flexible Global File Sharing

Miltchev, Stefan; Prevelakis, Vassilis; Ioannidis, Sotiris; Ioannidis, John; Keromytis, Angelos D.; Smith, Jonathan M.

Trust management credentials directly authorize actions, rather than divide the authorization task into authentication and access control. Unlike traditional credentials, which bind keys to principals, trust management credentials bind keys to the authorization to perform certain tasks. The Distributed Credential FileSystem (DisCFS) uses trust management credentials to identify: (1) files being stored; (2) users; and (3) conditions under which their file access is allowed. Users share files by delegating access rights, issuing credentials in the style of traditional capabilities. Credentials permit, for example, access by remote users not known in advance to the file server, which simply enforces sharing policies rather than entangling itself in their management. Throughput and latency benchmarks of our prototype DisCFS implementation indicate performance roughly comparable to NFS version 2, while preserving the advantages of credentials for distributed control.

Subjects

Files

Also Published In

Title
Proceedings of the FREENIX track, 2003 USENIX annual technical conference: June 9 - 14, 2003, San Antonio, Texas, USA

More About This Work

Academic Units
Computer Science
Publisher
USENIX
Published Here
July 6, 2012
Academic Commons provides global access to research and scholarship produced at Columbia University, Barnard College, Teachers College, Union Theological Seminary and Jewish Theological Seminary. Academic Commons is managed by the Columbia University Libraries.