Research Article

Dynamic configuration of access control for mobile components in FarGo

  1. Yoad Gidron1,
  2. Israel Ben-Shaul1,
  3. Ophir Holder1,
  4. Yariv Aridor2,*

Article first published online: 27 FEB 2001

DOI: 10.1002/cpe.545

Issue

Concurrency and Computation: Practice and Experience

Concurrency and Computation: Practice and Experience

Special Issue: High performance agent systems

Volume 13, Issue 1, pages 5–22, January 2001

Additional Information

How to Cite

Gidron, Y., Ben-Shaul, I., Holder, O. and Aridor, Y. (2001), Dynamic configuration of access control for mobile components in FarGo. Concurrency and Computation: Practice and Experience, 13: 5–22. doi: 10.1002/cpe.545

Author Information

  1. 1

    Department of Electrical Engineering, Technion—Israel Institute of Technology, Haifa, 32000, Israel

  2. 2

    IBM Research Laboratory in Haifa, MATAM, 31905 Haifa, Israel

*IBM Research Laboratory in Haifa, MATAM, 31905 Haifa, Israel

Publication History

  1. Issue published online: 27 FEB 2001
  2. Article first published online: 27 FEB 2001
  3. Manuscript Revised:
  4. Manuscript Received:

Funded by

  • Israeli Ministry of Science, Basic Infrastructure Fund. Grant Number: 9762

SEARCH

SEARCH BY CITATION

ARTICLE TOOLS

Get PDF (149K)

Keywords:

  • mobile components;
  • dynamic layout;
  • access control;
  • FarGo

Abstract

Component mobility is an important enabling technology for the design of wide area pervasive applications, but it introduces new challenges in the critical aspect of access control. In particular, when mobility is used for dynamic relocation of distributed components, access from both remote and local mobile components needs to be uniformly controlled. The dynamic determination of execution location, possibly crossing multiple administrative authorities, requires dynamic establishment and enforcement of access control. The deployment over widely heterogeneous hosts and devices requires integration of access control with dynamic probing of resource availability so as to influence the relocation process.

This paper presents a model for dynamic specification and enforcement of access control in the context of dynamically relocatable components, and an implementation in the Java-based FarGo framework. The specification follows a negotiation-based protocol that enables dynamic matching of available and required resources by providers and consumers, respectively. Enforcement is provided through a capability-based secure component reference architecture, which uniformly applies to both local and remote references, and through instance-level, as opposed to type-level (supported in Java), access control. Finally, access control is integrated into the programming model in a non-intrusive fashion, by separating the encoding of access control from the encoding of the logic of the application. Copyright © 2001 John Wiley & Sons, Ltd.

Get PDF (149K)