283 enforced by different means. |
283 enforced by different means. |
284 |
284 |
285 \subsubsection*{Multi-Agent Access Control} |
285 \subsubsection*{Multi-Agent Access Control} |
286 |
286 |
287 In military or banking, for example, very critical decisions |
287 In military or banking, for example, very critical decisions |
288 need to be made using a \emph{two-men rule}. This means such |
288 need to be made using a \emph{two-people rule}. This means such |
289 decisions need to be taken by two people together, so that no |
289 decisions need to be taken by two people together, so that no |
290 single person can defraud a bank or start a nuclear war (you |
290 single person can defraud a bank or start a nuclear war (you |
291 will know what I mean if you have seen the classic movie ``Dr |
291 will know what I mean if you have seen the classic movie ``Dr |
292 Strangelove or: How I Learned to Stop Worrying and Love the |
292 Strangelove or: How I Learned to Stop Worrying and Love the |
293 Bomb''\footnote{\url{http://en.wikipedia.org/wiki/Dr._Strangelove}}). |
293 Bomb''\footnote{\url{http://en.wikipedia.org/wiki/Dr._Strangelove}}). |
294 Translating the two-men rule into a software system seems not |
294 Translating the two-people rule into a software system seems not |
295 as straightforward as one might think. |
295 as straightforward as one might think. |
296 |
296 |
297 Let us assume we want to implement a system where CEOs can |
297 Let us assume we want to implement a system where CEOs can |
298 make decisions on their own, for example whether or not to |
298 make decisions on their own, for example whether or not to |
299 sell assets, but two managing directors (MDs) need to come |
299 sell assets, but two managing directors (MDs) need to come |