Dynamically Changing Trust Structure in Capability Based Access Control Systems

Abstract. The functioning of modern IT-systems with autonomously acting components requires an elaborate access control system in which each participant can maintain her own trust structure. In this work, we discuss ideas for an extension of capability based access control systems that allow the specification of dynamically changing trust of participants. We propose a classification of credentials and distinguish between credentials that have a positive and those that have a negative impact on access decisions. Furthermore, we investigate, how our ideas can be implemented in existing approaches for capability based access control systems.