A Holistic Approach to Security Policies – Policy Distribution with XACML over COPS

详细信息    查看全文

• 作者：Jan Peters ; Rol ; Rieke ; Taufiq Rochaeli ; Bjö ; rn Steinemann ; Ruben Wolf
• 关键词：service platform ; security policies ; policy distribution ; policy decision ; policy enforcement ; web services ; XACML ; COPS
• 刊名：Electronic Notes in Theoretical Computer Science
• 出版年：2007
• 出版时间：8 February 2007
• 年：2007
• 卷：168
• 期：Complete
• 页码：143-157
• 全文大小：403 K

文摘

The potentials of modern information technology can only be exploited, if the underlying infrastructure and the applied applications sufficiently take into account all aspects of IT security. This paper presents the platform architecture of the SicAri project, which aims to build a security platform for ubiquitous Internet usage, and gives an overview of the implicitly and explicitly used security mechanisms to enable access control for service oriented applications in distributed environments. The paper will introduce the security policy integration concept with a special focus on distribution of security policies within the service infrastructure for transparent policy enforcement. We describe in details our extensions of the COPS protocol to transport XACML payload for security policy distribution and policy decision requests/responses.