The Transform model is based on the concept of transformation of access rights. It unifies a number of diverse acccsscontrol mechanisms such as amplification, copy flags, separation of duties and synergistic authorization. In this paper we describe a distributed architecture for implementing Transform. Our architecture is based on capabilities with identities of subjects buried in them. This en...

Policies are a means of influencing management behaviour within a distributed system, without coding the behaviour into the managers. Authorisation policies specify what activities a manager is permitted or forbidden to do to a set of target objects and obligation policies specify what activities a manager must or must not do to a set of target objects. Conflicts can arise in the set of policie...

Segregation of Duties (SOD) can be seen as one major class of control activities within a company's Internal Control framework, contributing to the reliability of financial reporting. In recent years, SOD controls in terms of user access rights have experienced a surge of attention in particular, mostly due to the growing reliance of business processes on ERP systems. This paper presents a meth...

Cloud Computing offers many opportunities but also introduces new risks. A user outsourcing his database into the cloud loses control over this data. While the service provider often secures the data against external threats using standard techniques, the service providers themselves have to be trusted to ensure privacy. This work proposes a novel approach to provide security for database servi...

This paper documents two key costs of AD protection. First, once AD has been adopted countries often have a difficult time restraining its use. In recent years “new” users have accounted for half of the overall world total. Many of the heaviest AD users are countries who did not even have an AD statute a decade ago. Second, I will show that that on average AD duties cause the value of imports t...

The first three articles in the Clinical Ethics section of this issue of Journal of Medical Ethics address potential conflicting duties of physicians. The first paper, by Niklas Juth and Niels Lynöe (see page 215, Editor’s choice), reports results of an empirical study of Swedish physicians’ attitudes regarding the provision of virginity certificates or hymen restorations requested by women, of...