IIT Home Page CNR Home Page

A proposal on enhancing XACML with continuous usage control features

Usage control (UCON) proposed by R. Sandhu et al. [8, 9] is an attributebased authorization model and its main novelties are mutability of attributes and continuity of control.

OASIS eXtensible Access Control Markup Language (XACML) [10] is a widely-used language to write authorization policies to protect resources in a distributed computing environment (e.g. Grid). The XACML policy specifies beforeusage authorization process optionally complemented with obligation actions fulfillment. By now, XACML has insufficient facilities to express continuous usage control afterwards an access was granted and started.

In this paper, we introduce U-XACML, a new policy language, which enhances the original XACML with the UCON novelties. We extend a syntax and semantics of the XACML policy to define mutability of attributes and continuity of control. We introduce an architecture to enforce the U-XACML policy.


Grids, P2P and Services Computing , Delft, Netherlands , 2010

Autori IIT:

Maurizio Colombo

Foto di Maurizio Colombo

Aliaksandr Lazouski

Foto di Aliaksandr Lazouski

Tipo: Articolo in Atti di convegno internazionale
Area di disciplina: Information Technology and Communication Systems