1

Delegation of Authority

SUMITTED BY

NOUFAL N

2

What is Delegation of Authority?

• Allowing someone to act on your behalf to perform tasks (consume resources) that are available to you

• Delegator should be empowered to delegate to anyone he needs to, subject to certain organisation controls (i.e. the organisation’s Delegation Policy)

3

How do you delegate to others today?

• To enter your house and fetch something– If your house if locked?

• To use your PC – If it is protected by a username and

password?

• To withdraw money from your bank account – Using an ATM?

4

Role Based Access Control

• Users are given roles (or attributes)• Holders of attributes are given access

permissions• Examples• Ed and Jake are Students at Kent University• Students at Kent University can read the exam

results file on the website• Jo and Zoe are Tesco Clubcard holders• Tesco Clubcard holders get 10% discount when

shopping electronically at Tescos

5

Advantages of the Delegation Issuing Service

• Users don’t need to have signing keys since the DIS signs the Attribute Certificates on their behalf

• The DIS keeps a central record (audit trail) of who has delegated what to whom

• The DIS has a Delegation Policy to control who can delegate what to whom

• The process of privilege checking is very efficient since all ACs are issued by the DIS (and not by lots of different users)