In this paper we examine existing authorization mechanisms and their inadequacies. We introduce the concept of trust management, explain its basic principles and describe some existing trust-management engines, including PolicyMaker and KeyNote. We also report on our experience using trust-management engines in several distributed-system applications.
Click Here to download this article