Enforcing Context-Sensitive Policies in Collaborative Business Environments

As enterprises seek to engage in increasingly rich and agile forms of collaboration, they are turning towards service-oriented architectures that enable them to selectively expose different levels of functionality to both existing and prospective business partners. This includes enforcing access control policies whose elements are tied to changing contractual relationships or to information obtained from external sources (e.g. ratings, credit worthiness, export restrictions, etc.). To ensure maximum openness, we argue that such sources of contextual information should themselves be represented as web services that can be identified and accessed on the fly, as required to enforce relevant policies. We propose an architecture for enforcing context-sensitive access control policies in which sources of information can be annotated with rich semantic profiles. This includes a meta-control architecture for dynamically orchestrating policy reasoning together with the identification and acces...

• Type: Conference
• Year: 2007
• Where: ICDE
• Authors: Alberto Sardinha, Jinghai Rao, Norman M. Sadeh
• Keywords: Access Control Policies, Architecture, Database, External Sources, ICDE 2007