Policy control management for Web Services

Arlindo L. Marcon, Altair O. Santin, Luiz A. de Paula Lima, Rafael R. Obelheiro, Maicon Stihler
2009 2009 IFIP/IEEE International Symposium on Integrated Network Management  
The decentralization of corporate policy administration aiming to maintain the unified management of user permissions is a hard task. The heterogeneity and complexity of corporate environments burdens the security administrator with writing equally complex policies. This paper proposes an architecture based on Web Services, policy provisioning, and authorization certificates, to build up a loosely coupled unified administrative control for corporate environments. A certificate-based permission
more » ... anagement scheme is used to derive new policies in the local domains of each branch. These new policies will update the corporate repository which, in turn, will configure the corresponding policies in the local domains of each branch. The Web Services technology provides the underlying protocols for the development of a prototype which shows the feasibility of our proposal.
doi:10.1109/inm.2009.5188786 dblp:conf/im/MarconSLOS09 fatcat:ki6g65ne2bg6jkzhqrevmvfv54