### Enforcing Confinement in Distributed Storage and a Cryptographic Model for Access Control

Shai Halevi, Paul A. Karger, and Dalit Naor

##### Abstract

This work is concerned with the security of the standard T10 OSD protocol, a capability-based protocol for object stores designed by the OSD SNIA working group. The Object Store security protocol is designed to provide access control enforcement in a distributed storage setting such as a Storage Area Network (SAN) environment. In this work we consider in particular the ability of the OSD protocol to enforce *confinement*, which is the property that even misbehaving participants can not leak secret information across predefined boundaries. We observe that being a "pure capability" protocol, the plain vanilla OSD protocol is incapable of enforcing confinement. We show, however, that given a trustworthy infrastructure for authentication and secure channels, the protocol can be used in a manner that achieves the desired property (and does not require any change in the message format). Thus we demonstrate that object stores can in principle be used in a standard fashion in applications that require protection against leakage of secret data. Having identified a problem and proposed a solution, we proceed to prove formally that the proposed protocol indeed meets all its security goals. In the process we refine common cryptographic models in order to be able to reason about confinement, and then devise a precise model for a distributed capability-based access-control mechanism. To our knowledge, this is the first time such a model for access-control is defined in a cryptographic setting, and defining it highlights what can and cannot be achieved by such mechanisms.

Available format(s)
Category
Applications
Publication info
Published elsewhere. Unknown where it was published
Keywords
Contact author(s)
shaih @ alum mit edu
History
2005-06-08: revised
See all versions
Short URL
https://ia.cr/2005/169

CC BY

BibTeX

@misc{cryptoeprint:2005/169,
author = {Shai Halevi and Paul A.  Karger and Dalit Naor},
title = {Enforcing Confinement in Distributed Storage and a Cryptographic Model for Access Control},
howpublished = {Cryptology ePrint Archive, Paper 2005/169},
year = {2005},
note = {\url{https://eprint.iacr.org/2005/169}},
url = {https://eprint.iacr.org/2005/169}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.