Attribute-based Access Control Model for Web Services
He Fu · 2007
Traditional access control models are not well-suited for the services-oriented environments because they are mostly static and coarsely grained.An Attribute-based access control(ABAC) model is proposed based on SAML and XACML,which adopted the authorization mechanism dynamically and fine-grained based on subject,resource and environment attributes.The new model is more flexible,which is especially suitable for the dynamic,ad-hoc environment for Web services.