Location of Repository

Policy administration control and delegation using XACML and delegent

By Ludwig Seitz, Erik Rissanen, Thomas S, Babak Sadighi Firozabadi and Olle Mulmo

Abstract

Abstract — In this paper we present a system permitting controlled policy administration and delegation using the XACML access control system. The need for these capabilities stems from the use of XACML in the SweGrid Accounting System, which is used to enforce resource allocations to Swedish research projects. Our solution uses a second access control system Delegent, which has powerful delegation capabilities. We have implemented limited XML access control in Delegent, in order to supervise modifications of the XML-encoded XACML policies. This allows us to use the delegation capabilities of Delegent together with the expressive access level permissions of XACML. I

Year: 2005
OAI identifier: oai:CiteSeerX.psu:10.1.1.360.2520
Provided by: CiteSeerX
Download PDF:
Sorry, we are unable to provide the full text but you may find it at the following location(s):
  • http://citeseerx.ist.psu.edu/v... (external link)
  • http://liris.cnrs.fr/docs/RR-2... (external link)
  • Suggested articles


    To submit an update or takedown request for this paper, please submit an Update/Correction/Removal Request.