Explicit Delegation Using Configurable Cookies
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Cambridge International Workshop on Security Protocols
MetadataShow full item record
Llewellyn-Jones, D., Jenkinson, G., & Stajano, F. (2017). Explicit Delegation Using Configurable Cookies. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 10368 LNCS 141-152. https://doi.org/10.1007/978-3-319-62033-6_17
Password sharing is widely used as a means of delegating access, but it is open to abuse and relies heavily on trust in the person being delegated to. We present a protocol for delegating access to websites as a natural extension to the Pico protocol. Through this we explore the potential characteristics of delegation mechanisms and how they interact. We conclude that security for the delegator against misbehaviour of the delegatee can only be achieved with the cooperation of the entity offering the service being delegated. To achieve this in our protocol we propose configurable cookies that capture delegated permissions.
We are grateful to the European Research Council for funding this research through grant StG 307224 (Pico).
European Research Council (307224)
External DOI: https://doi.org/10.1007/978-3-319-62033-6_17
This record's URL: https://www.repository.cam.ac.uk/handle/1810/256299