Modeling permissions in a (U/X)ML world

  • Authors:
  • Muhammad Alam;Ruth Breu;Michael Hafner

  • Affiliations:
  • Universitat Innsbruck, Austria;Universitat Innsbruck, Austria;Universitat Innsbruck, Austria

  • Venue:
  • ARES '06 Proceedings of the First International Conference on Availability, Reliability and Security
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we present a novel approach for the specification of access rights in a Service Oriented Architecture. Being part of the SECTET framework for model driven security for B2B-workflows, our specification language SECTET-PL for permissions is influenced by the OCL specification language and is interpreted in the context of UML models. Concerning the technological side, SECTETPL specifications are translated into platform independent XACML permissions interpreted by a security gateway.