XeNA: an access negotiation framework using XACML

Diala Abi Haidar (1, 2) , Nora Cuppens-Bouhlahia (1, 2) , Frédéric Cuppens (1, 2) , Hervé Debar (3)

1 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
2 Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (UMR 3192)
3 FT- France Télécom R&D (France Télécom)

XeNA is a new model for the negotiation of access within an extended eXtensible Access Control Markup Language (XACML) architecture. We bring together trust management through a negotiation process and access control management within the same architecture. The negotiation process based on resource classification methodology occurs before the access control management. A negotiation module at the core of this negotiation process is in charge of collecting resources required to establish a level of trust and to insure a successful evaluation of access. The access control management is based on an extended Role-Based Access Control (RBAC) profile of XACML. This extended profile responds to advanced access control requirements and allows the expression of several access control models within XACML.

Mots clés: Access control; XACML; RBAC; Or-BAC; Interoperability; Trust management

Domaines: Cryptographie et sécurité [cs.CR]

Diala Abi Haidar, Nora Cuppens-Bouhlahia, Frédéric Cuppens, Hervé Debar. XeNA: an access negotiation framework using XACML. Annals of Telecommunications - annales des télécommunications, 2009, 64 (1-2), pp.155 - 169. ⟨10.1007/s12243-008-0050-5⟩. ⟨hal-00448945⟩