Communication model design and implementation between PEP and PDP based on SAML
LI Yunpen · Computer Engineering and Applications Journal · 2013
Against the problem of transmitting authorization request and response between the entities of XACML access control model, this paper proposes a flexible, scalable communication model between PEP and PDP. According to the extension of SAML specification, XACML authorization request and response are packaged as SAML authorization request and response.Spring Web Service architecture is used to implement the PEP-WS modules and PDP-WS modules which are responsible for transmitting SAML authorization request and response. The model is designed to achieve the transparency of transmission of authorization request and response, will achieve the integration of PEP and PDP, and enhance the flexibility and scalability of XACML access control model deployment.