Chadwick, David W., Otenko, Olexandre, Hunter, David, Leoni, Cristiano (2002) Privilege Management for E-Construction. In: Rezgui, Yacine and Ingirige, Bingunath and Aouad, Ghassan, eds. Proc European Conf on Information and Communication Technology Advances and Innovation in the Knowledge Society, Part B, University of Salford, UK. 2002. . pp. 91-102. (The full text of this publication is not currently available from this repository. You may be able to access a copy if URLs are provided) (KAR id:13682)
The full text of this publication is not currently available from this repository. You may be able to access a copy if URLs are provided. |
Abstract
We describe a role based, policy driven, Privilege Management Infrastructure, in which the authorisation tokens are roles held as X.509 attribute certificate stored in LDAP directories. Users are assigned roles, and roles are granted privileges. The authorisation policy says which roles and attribute certificates are to be trusted, and what access rights are to be granted to each role. The authorisation policy is written in XML by the service provider. The access control decision function(ADF) is a policy driven engine that makes the granted or denied access decisions. The ADF is written in Java, and is completely generic so that it can be built into any e-construction application. We have currently built it into two construction applications, E-tendering and E-planning, and these are described.
Item Type: | Conference or workshop item (Paper) |
---|---|
Subjects: | Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming, |
Divisions: | Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing |
Depositing User: | Mark Wheadon |
Date Deposited: | 24 Nov 2008 17:59 UTC |
Last Modified: | 05 Nov 2024 09:47 UTC |
Resource URI: | https://kar.kent.ac.uk/id/eprint/13682 (The current URI for this page, for reference purposes) |
- Export to:
- RefWorks
- EPrints3 XML
- BibTeX
- CSV
- Depositors only (login required):