Alternative Java security policy model

Java language and technology [3, 4, 10] were proposed with security in mind, yet there are some limitations especially when it comes to running Java applications in a distributed context. In this work we propose a new security policy together with the relevant verification mechanisms. This model is aimed at controlling the access to the system resources in a trustable and flexible way. This model extends the existing security mechanisms offered by Java in two ways: first the authentication is based on public keys rather than global names which is more flexible. Second our model supports delegation which is of major importance in a distributed context. The new model has been integrated in a Jini-based platform.