A new language called Simba for specifying resource protection mechanisms has been developed by ARPA-funded researchers in the Charon project. Simba will aid automation, verification, and interoperation across security policy boundaries by providing a platform-independent way of describing a security policy. With Simba as a basis, interoperation is made possible using a second specification language, Mufasa. In Mufasa a mapping from one security policy to another can be specified, thus allowing access requests from a separate, possibly unfamiliar, system to be considered. For example, in wide-scale systems, a request for data may be submitted to an information source from a foreign user.
Current systems require handling of such requests to be carefully specified on a case by case basis.
With Mufasa, one can write a general description of the requirements for such handling, which is then automatically implemented, leading to a reduction in both effort and possibility of error. The Charon project will accomplish technology transfer through the construction and dissemination of prototypes and reference implementations. It is infeasible to have prior knowledge about every individual who may submit a request for service, as this would place an unacceptable burden on the server and on the client. In this environment a credential presented in support of a request will provide the necessary information for the service to make an access control decision. In fall and winter 1995 we will demonstrate the utility of credentials to the Web community through visits and prototype demonstrations at key Web organizations.