Re: Comment on the paper by Rotondi, et al.

I'm afraid I think no.
I think the copyright form we signed doesn't allow me to distribute the paper on DLs; 
isn't it?
Ciao
   DOmenico



On 3 Feb 2014 at 19:30, charlie robert wrote:

Was there a free download link ever found for this paper?

thank you,
Robert

On Jan 31, 2014, at 10:11 AM, Mark S. Miller <[email protected]> wrote:

    Is there a non-paywalled link from which we can download a copy of the paper 
    that we can read?
    

    On Fri, Jan 31, 2014 at 7:13 AM, Domenico Rotondi 
    <[email protected]> wrote:
    
    On 31 Jan 2014 at 8:13, David Barbour wrote:

    Could you link to this paper?

    Hi David,
    are you asking a reference to the mentioned paper? If so this is it:
*   D. Rotondi, S. Gusmeroli, S. Piccione, “A capability-based security 
    approach to manage access control in the Internet of Things”, 
    Mathematical and Computer Modelling Journal, ISSN 0895-7177, 
    10.1016/j.mcm.2013.02.006
    Otherwise, plese clarify the question.
    Thanks, ciao
       Domenico
    

    On Fri, Jan 31, 2014 at 12:50 AM, Karp, Alan H <[email protected]> wrote:
    I’m reading the paper section by section as time permits, and I just finished the piece 
    on revocation.  Here I want to comment on the feature that allows revocation of just the 
    capability and not those delegated from it.  I believe that feature has a serious flaw, but 
    Marc Stiegler has come up with the correct variant.
     
    As described in the paper, a revocation request can be for the capability itself or the 
    capability and all capabilities delegated from it.  The problem with the former is that it 
    is too easy to bypass the revocation.  Say that Alice delegates a capability that expires 
    in a year to Bob, a manager in her department.  Bob re-delegates capabilities with 
    subsets of the permissions to people reporting to him.  Three months later, Bob leaves 
    the company under suspicion of stealing company secrets.  Alice clearly wants to 
    revoke Bob’s capability, but she doesn’t want to disrupt the work of people in his 
    former department.  As a result, she revokes Bob’s capability but not the capabilities 
    delegated from it.  Unfortunately, one of those delegated capabilities was one Bob 
    delegated to himself with a key not controlled by the company.  The result is that Bob 
    retains access even after being fired.
     
    Marc Stiegler’s solution to Alice’s dilemma uses the distinction between vetted and 
    unvetted identities.  Say that the enterprise provides a mechanism by which Bob 
    denotes the target of the delegation by specifying someone in the company directory. 
     That’s a vetted identity.  If Bob delegates to someone not known to the enterprise, 
    that’s an unvetted identity.  When Bob’s capability is revoked, the rule is to revoke all 
    capabilities delegated to unvetted identities but leave the others. 
     
    ________________________
    Alan Karp
    Principal Scientist
    Enterprise Services, Office of the CTO
    Hewlett-Packard Company
    1501 Page Mill Road
    Palo Alto, CA 94304
    (650) 857-3967, fax (650) 857-7029
    http://www.hpl.hp.com/personal/Alan_Karp
    
    _______________________________________________
    cap-talk mailing list
    [email protected]
    http://www.eros-os.org/mailman/listinfo/cap-talk
      
    
    _______________________________________________
    cap-talk mailing list
    [email protected]
    http://www.eros-os.org/mailman/listinfo/cap-talk



    --
        Cheers,
        --MarkM
    _______________________________________________
    cap-talk mailing list
    [email protected]
    http://www.eros-os.org/mailman/listinfo/cap-talk

- charlie


//
QedaVEy0epe2M5mRNig2FKnnKKgBQyoOmNEBSW2KnSrj5D0LRjV5lQI8YTz1llU0HQ8FOmP
+yq64JMQbM49Af06p8G87HSoPJXYSsCylLl/FBrrPRUHVLJfW5wAHYkTFbRYesXn6eoFAqLx
TDL2+McUyIVgbetrEGQcQpx4qRH1MBHj7TQOQuK/W0WZ72yuAhm1xeQzq7YX8WnMqQmy
kO520ba6WffhsHXmUXeSEyPVVbDGQYCia8uxy2lpRsGmGy1ensdllyWr6VnSiuvli03Knq0Yviw
Va1mwuJSLFIzdT9r/hP/5JR9x/57c9BgIKoOSKB2AK2pxdC+UxSKs6WVtqWOlKjSOxdtbCQK4Z
UQr4lKEr2pJfcMr619/EuxymUkDDK9mxC1vGTNB51hrVl/UejBzdBp1nYwTuQnSDrMMsJLbzG
U2Mg2IbWeDnKWnYCNhh0sks75b4rQyU2Sc6dfSaTXd227lZwkI+ko8dvf7JyHBgwhJEpieVjt/5lH
doF0GrP0Xzo0WWtovTgCQ78k7n/9QI7auU6MjGKn8o3gJTG/RNCp0yUEU2UiUv1kJjxTIhWBt6
2sSo9ZhyPVY2cxJ72tTj4EbIYzxkZua/eFPZgDDiNQNg/ItDQYyxZI1TvWgy3fac3yfLski63l2sP/AI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X
rSOr1GpI+4FCx60q4sbaKjNq0P0KlFoD7kTFnOg35tk3PB4hDbllGZX5f3P1195udfTZUiuxhhDvow
pdWbXG9j79x0NkyHNVQUeSiTcoSt/uCUt/D+AllbFLb9AFGvUD676s2mG+WEyLp6/IYkLIbdVS
uh2rF09QImH+AWir/p7v4MPbYsdBoelDroPGNWDh0vXcXLr/A8MrHcfIqfZYaF+WNAE+nPBM
pq4vYAyrUPl6A8tyFi8IpggkoGxhx4EaJQWhVHajPxxl/cBbzwWss/cvT+GtP1rhJuXKoNQPZ9MjJ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eFMO
6q4UaT3yVH8hTNmcblsslk8vQmdaxZxDdrVyIAG5d9VKxOc3V9K/09Y+SwDbSzDGpMpXI/z9B
vyGxP0K7IaShnkooXGVu9OPDdT4P2H6l5+Q5fG1ZcXvJjELJoXd2+mdT+5L6CcI7SNaLVOz//lzh
vb1is7VPrY8YwEBHVTozgud5Eg+/r0fypVQLfrKKzfg+xnd+jvfZgSeJTAhPQBFg54JMzY9Zq1SD
jOoJ1scIz6hR7+C8bQJRkqZ/bGxc0LX1VoptF6Rau3VdUWEJ8ZFWGagmzvP/iFoIVBIY3Nnlg6e5
mUXsA1vcUt2Qp04ddkz6AKlQL+loZG9zIa/2zB6JkOCYJgKniDm3LowVLEw3n6VNnyOpGaguV
Ps406IwcqXCSHr9v+cu5ZGihoLkdVejOds9/uDDLQf6ae/rpcurk+T7WqHTrZW9skbW5lkq90S+bM
94axtHQWROS1y7USiQUo86lSc+2X/5ejO11ElGSVj1UM+O2u8ai4Ys/2INU+gmwZV4darHrY4b
XhDLMUviWBn8bLV4b0WSy8A7/1HB5Wg1BmMpvJn36xKdRt+690GG7Wb1gBqVM97XrdMj3
kHHuAGibKohEsKf/LrJKCDabj123nroRQQffOZmI9NGXptlboIXmhfbx+2kge/VWChPor3iwneaM
Rq+/Tv/F+0

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk