Delegation depth control in trust-management system

Trust management system has been a promising approach to solve the access control problems in distributed systems. Delegation is a core concept in it and needs to be limited with respect to depth. In this paper, some different delegation depth control approaches in current trust management system are discussed. Then RT+₀ is introduced, which incorporates the integer delegation depth control into RT₀ The RT+₀ credential adds to RT₀ depth value, which provides a more expressive power. The changed semantics is formally defined by a translation from credential to datalog rules. The computational complexity analysis is given and it shows that the semantics is also algorithmically tractable.