Policy administration control and delegation using XACML and delegent
2005 (English)Conference paper (Refereed)
In this paper we present a system permitting controlled policy administration and delegation using the XACML access control system. The need for these capabilities stems from the use of XACML in the SweGrid Accounting System, which is used to enforce resource allocations to Swedish research projects. Our solution uses a second access control system Delegent, which has powerful delegation capabilities. We have implemented limited XML access control in Delegent, in order to supervise modifications of the XML-encoded XACML policies. This allows us to use the delegation capabilities of Delegent together with the expressive access level permissions of XACML.
Place, publisher, year, edition, pages
2005. 49-54 p.
, Proceedings - IEEE/ACM International Workshop on Grid Computing, ISSN 1550-5510 ; 2005
Access control system, Policy administration, SweGrid Accounting System, Control system analysis, Project management, Research and development management, XML, Distributed computer systems
IdentifiersURN: urn:nbn:se:kth:diva-157064DOI: 10.1109/GRID.2005.1542723ISI: 000236352900007ScopusID: 2-s2.0-33749661756ISBN: 0780394933ISBN: 9780780394933OAI: oai:DiVA.org:kth-157064DiVA: diva2:772714
6th IEEE/ACM International Workshop on Grid Computing; Seattle, WA; United States; 13 November 2005 through 14 November 2005
QC 201412172014-12-172014-12-052014-12-17Bibliographically approved