Based on the distributed group interpretation, we are able to give a simple logic program for SDSI s linked localname resolution. Our logic program is itself a logic for linked local names. Compared with existing work, our logic has the following advantages. It corresponds exactly to SPKI SDSI 2.0. SPKI defines a precise semantics describing how to 11 reduce a chain of delegated authorization certificates.
Group certificates allow treating a set of entities as a single entity.
It is thus possible to grant or revoke rights to from a set of users in a single authorization certificate. On SDSI's Linked Local Name Spaces . It is non trivial to establish and implement a global, contextand application independent naming scheme as in the X.500 recommendation. Trust models and uncertainty management. Most evidence in real life is to some degree uncertain.