Weighted Access Control Policies Cohabitation in Distributed Systems

摘要

Collaboration between distributed domains has become an emerging demand that allows organization to share resources and services. In order to ensure secure collaboration between them, authorization specification is required. Thus, a global access control policy should be defined. However, the combination of the collaborator's access control policies may create authorization conflicts. In this paper, we propose a new approach based on organization's weight α_i in order to resolve potential detected policy conflicts, also we define how to calculate α_i accordingly and we propose a new algorithm to resolve the detected conflicts.