Extending the schematic protection model. I. Conditional tickets and authentication

The Schematic Protection Model, SPM, allows us to specify the protection structure of a system and gives an algorithm to reason about the transmission of privileges in the system. This paper extends the SPM model to include for conditional tickets and to provide authentication. We also extend the decision algorithm of the safety problem to take into account these modifications.<
>