A Flexible Authorization Framework

2004 ◽  
pp. 149-176
Author(s):  
Duminda Wijesekera ◽  
Sushil Jajodia
Keyword(s):  
Access Control ◽  
Multiple Access ◽  
Rule Base ◽  
Multiple Access Control ◽  
Control Policies ◽  
Workflow Systems ◽  
Access Control Policies ◽  
New Challenges

Advances in application areas such as Internet-based transactions, cooperating coalitions, and workflow systems have brought new challenges to access control. In order to meet the diverse needs of emerging applications, it has become necessary to support multiple access control policies in one security domain. This chapter describes an authorization framework, referred to as the Flexible Authorization Framework (FAF), which is capable of doing so. FAF is a logic-based framework in which authorizations are specified in terms of a locally stratified rule base. FAF allows permissions and prohibitions to be included in its specification. FAF specifications can be changed by deleting and inserting its rules. We also describe FAF’s latest additions, such as revoking granted permissions, provisional authorizations, and obligations.

Sign in / Sign up

Export Citation Format

Share Document