ACWP Generic Model for AC: Difference between revisions

From IHE Wiki
Jump to navigation Jump to search
New page: IHE White Paper on Access Control == Generic Model for Access Control == ===Access Control Systems=== ===Management of Policies and Attributes=== ===Context, Subject, and Resource Domain=...
 
Line 5: Line 5:
===Management of Policies and Attributes===
===Management of Policies and Attributes===
===Context, Subject, and Resource Domain===
===Context, Subject, and Resource Domain===
[[Image:WPAC_Generic_Model_v01.png]]  
[[Image:WPAC_Generic_Model_v01.png|640 px]]  
* Domain 1: Context Domain
* Domain 1: Context Domain
**Issuer of a request affecting a protected resource
**Issuer of a request affecting a protected resource

Revision as of 15:49, 17 January 2009

IHE White Paper on Access Control

Generic Model for Access Control

Access Control Systems

Management of Policies and Attributes

Context, Subject, and Resource Domain

  • Domain 1: Context Domain
    • Issuer of a request affecting a protected resource
    • Management of context attributes
    • control of the assertion/message flow
  • Domain 2: Subject Domain (in XSPA part of the issuing domain)
    • Subject authentication
    • Management of subject attributes
  • Domain 3: Resource Domain
    • management of protected resources (e. g. data base)
    • management of resource attributes
    • management of resource security policies
    • policy enforcement and policy decision

Discussion

place issues to be discussed among the editorial team here...

Change Requests

place your change requests here...