Delegation in distributed systems: challenges and open issues

New DAC and RBAC certificate-oriented access control systems are based on delegation of privileges. In this paper, we present a survey of different issues related to certificate-based delegation, such as management structures, authority and ownership, anonymity, certificate distribution, and revocation.