Alternative Java Security Policy Model

TL;DR: In this paper, the authors propose a new security policy together with the relevant verification mechanisms, which is aimed at controlling the access to the system resources in a trustable and flexible way.

Abstract: Java language and technology [3, 4, 10] were proposed with security in mind, yet there are some limitations especially when it comes to running Java applications in a distributed context. In this work we propose a new security policy together with the relevant verification mechanisms. This model is aimed at controlling the access to the system resources in a trustable and flexible way. This model extends the existing security mechanisms offered by Java in two ways: first the authentication is based on public keys rather than global names which is more flexible. Second our model supports delegation which is of major importance in a distributed context. The new model has been integrated in a Jini-based platform.