XACML Policy Profile for Multidomain Network Resource Provisioning and Supporting Authorisation Infrastructure

Yuri Demchenko, Mihai Cristea, Cees de Laat
2009 2009 IEEE International Symposium on Policies for Distributed Systems and Networks  
Policy definition is an important component of the consistent authorisation service infrastructure that could be effectively integrated with the general resource provisioning workflow and network control and management plane. The paper describes the proposed XACML-NRP policy and attributes profile for Network Resource Provisioning. In addition to specifying a set of subject, resource, action attributes that are required for consistent XACML policy definition, the proposed profile allows also
more » ... dling network path information what is especially important for QoS enforcement. To overcome stateless character of XACML policies, the proposed authorisation infrastructure provides a number of security mechanisms to support such important for NRP functionality as authorisation session and interdomain security context management, simple delegation, conditional authorisation decisions, and policy obligations handling.
doi:10.1109/policy.2009.33 dblp:conf/policy/DemchenkoCL09 fatcat:3b2notfzlfdf7jtg5rx2khklty