| Modern day enterprises exhibit a growing trend toward adoption of enterprise computing services for efficient resource utilization, scalability and flexibility. These environments are characterized by heterogeneous, distributed computing systems exchanging enormous volumes of time-critical data with varying levels of access controlling a dynamic business environment. The enterprises are thus faced with significant challenges as they endeavor to achieve their primary goals, and simultaneously ensure enterprise-wide secure interoperation among the various collaborating entities. Key among these challenges are providing effective mechanism for enforcement of enterprise policy across distributed domains, ensuring secure content-based access to enterprise resources at all user levels, and allowing the specification of temporal and non-temporal context conditions to support fine-grained dynamic access control. This thesis investigates these challenges, and presents XFGAC, an XML-based FGAC policy specification language and its implementation for enforcing enterprise-wide access control. This thesis discusses these topics, and brings out a solution named XFGAC, that is, XML Based Fine Grained Access Control system infrastructure, the core of XFGAC includes Fine Grained Access Control Mode (FGAC) and Fine Grained Access Control Model Specification Language (FGACML).FGAC is the improvement to TRBAC, and TRBAC is an extension to RBAC.FGAC improves the time constraint and trigger in TRBAC, and constructs compatible fine grained AC model; FGACML is a description language and data structure of FGAC model. It is based on extensible Markup Language (XML), so it has perfect platform independency and extensibility. We discuss the salient features of the specification language, and present the software architecture of our system. A comprehensive example is included to discuss and motivate the applicability of the XFGAC framework to a generic enterprise environment. |
PDF Full Text Request