Resource Access and Mobility Control with Dynamic Privileges Acquisition

μKlaim is a process language that permits programming distributed systems made up of several mobile components interacting through multiple distributed tuple spaces. We present the language and a type system for controlling the activities, e.g. access to resources and mobility, of the processes in a net. By dealing with privileges acquisi- tion, the type system enables dynamic variations of security policies. We exploit a combination of static and dynamic type checking, and of in- lined reference monitoring, to guarantee absence of run-time errors due to lack of privileges and state two type soundness results: one involves whole nets, the other is relative to subnets of larger nets.