Policy Administration Control and Delegation using XACML and Delegent - Archive ouverte HAL
Communication Dans Un Congrès Année : 2005

Policy Administration Control and Delegation using XACML and Delegent

Erik Rissanen
  • Fonction : Auteur
Thomas Sandholm
  • Fonction : Auteur
Babak Sadighi Firozabadi
  • Fonction : Auteur

Résumé

In this paper we present a system permitting controlled policy administration and delegation using the XACML access control system. The need for these capabilities stems from the use of XACML in the SweGrid Accounting System, which is used to enforce resource allocations to Swedish research projects. Our solution uses a second access control system Delegent, which has powerful delegation capabilities. We have implemented limited XML access control in Delegent, in order to supervise modifications of the XML-encoded XACML policies. This allows us to use the delegation capabilities of Delegent together with the expressive access level permissions of XACML.
Fichier non déposé

Dates et versions

hal-01585311 , version 1 (11-09-2017)

Identifiants

  • HAL Id : hal-01585311 , version 1

Citer

Ludwig Seitz, Erik Rissanen, Thomas Sandholm, Babak Sadighi Firozabadi. Policy Administration Control and Delegation using XACML and Delegent. GRID '05 Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing, Nov 2005, Seattle, United States. pp.49-54. ⟨hal-01585311⟩
143 Consultations
0 Téléchargements

Partager

More