Skip to main content
Kent Academic Repository

Adding Support to XACML for Dynamic Delegation of Authority in Multiple Domains

Chadwick, David W. and Otenko, Sassa and Nguyen, Tuan Anh (2006) Adding Support to XACML for Dynamic Delegation of Authority in Multiple Domains. In: Communications and Multimedia Security. Lecture Notes in Computer Science, 4237 . Springer Berlin/Heidelberg, pp. 67-86. ISBN 978-3-540-47820-1. (doi:10.1007/11909033) (KAR id:14405)

Abstract

In this paper we describe how we have added support for dynamic delegation of authority that is enacted via the issuing of credentials from one user to another, to the XACML model for authorisation decision making. Initially we present the problems and requirements that such a model demands, considering that multiple domains will typically be involved. We then describe our architected solution based on the XACML conceptual and data flow models. We also present at a conceptual level the policy elements that are necessary to support this model of dynamic delegation of authority. Given that these policy elements are significantly different to those of the existing XACML policy, we propose a new conceptual entity called the Credential Validation Service (CVS), to work alongside the XACML PDP in the authorisation decision making. Finally we present an overview of our first specification of such a policy and its implementation in the corresponding CVS.

Item Type: Book section
DOI/Identification number: 10.1007/11909033
Uncontrolled keywords: delegation, multiple domains, authority
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
Depositing User: Mark Wheadon
Date Deposited: 24 Nov 2008 18:03 UTC
Last Modified: 16 Nov 2021 09:52 UTC
Resource URI: https://kar.kent.ac.uk/id/eprint/14405 (The current URI for this page, for reference purposes)

University of Kent Author Information

Chadwick, David W..

Creator's ORCID: https://orcid.org/0000-0003-3145-055X
CReDIT Contributor Roles:

Nguyen, Tuan Anh.

Creator's ORCID:
CReDIT Contributor Roles:
  • Depositors only (login required):

Total unique views for this document in KAR since July 2020. For more details click on the image.