A role-based XACML administration and delegation profile and its enforcement architecture

  • Authors:
  • Min Xu;Duminda Wijesekera

  • Affiliations:
  • George Mason University, Fairfax, VA, USA;George Mason University, Fairfax, VA, USA

  • Venue:
  • Proceedings of the 2009 ACM workshop on Secure web services
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

The OASIS technical committee published the XACML v3.0 administration and delegation profile (XACML-Admin) working draft on 16 April 2009 [3] in order to provide policy administration and dynamic delegation services to the XACML runtime. We enhance this profile by adding role-based delegation by amalgamating the proposed profile with the XACML-ARBAC profile proposed in [19]. By doing so, we improve the scalability of the delegation mechanism. Second, we show how XACML-ARBAC enforcement mechanism proposed in [19] can be enhanced to enforce the proposed role-based administration and delegation XACML profile (XACML-ADRBAC), therefore providing a method to enforce the XACML-Admin profile proposed in [3].