Authorization Language for Inter‐Enterprise
Marco Biagi, Roberto Guanciale · 2012
A key aspect of the government of Enterprise collaboration is authorization management. The wider adopted language for authorization is XACML, which defines a declarative access control policy language. The adoption of a specific language permits several benefits: the expressiveness of the language allows stakeholders to define complex policies without support of IT experts; authorizations can be changed in real time; and policies can be shared among enterprises independently by their IT infrastructure and applications. This chapter proposes an XACML extension that does not affect standard guidelines. XACML is a standard that defines a declarative XML access control policy language. The strategy presented here focuses on allowing definition of custom functions inside XACML policies, allowing higher order functions to apply any user-defined predicate. The chapter talks about on the VENIS project, which aims at providing an interoperable framework to distributively coordinate activities of legacy applications hosted by several enterprises. Controlled Vocabulary Terms computational linguistics; data integration