PMES: Privilege management and enforcement system for secure distributed resource sharing

Abstract

PMES provides privilege management and enforcement methods for end user access to distributed mass storage data and information via the Global Internet using X-windows interfaces, and supporting authentication and encryption. It permits anyone owning or managing a resource (not only a system administrator) to control fine-grained privileges on a variety of networked resources. The system consists of a Java-based privilege management interface, a server which stores privilege information, and an enforcement system. In this paper, we describe the system, emphasizing the the implementation of the management interface, the server, and the interaction of the two.