A security architecture for object-based distributed systems

Large-scale distributed systems present numerous secu-rity problems not present in local systems. In this paper we present a general security architecture for a large-scale object-based distributed system. Its main features include ways for servers to authenticate clients, clients to authenti-cate servers, new secure servers to be instantiated without manual intervention, and ways to restrict which client can perform which operation on which object. All of these fea-tures are done in a platform- and application-independent way, so the results are quite general. The basic idea behind the scheme is to have each object owner issue cryptograph-ically sealed certificates to users to prove which operations they may request and to servers to prove which operations they are authorized to execute. These certificates are used to ensure secure binding and secure method invocation. The paper discusses the required certificates and security proto-cols for using them.