Gestion des habilitations : modèles et architectures

Abstract

Access control is of major importance in nowadays information systems which are open, multi-domains and multi-suppliers. We address architectural and modelling issues of authorization systems allowing a clear separation of concerns between the requirements of the services to deploy and the access control management including the assurance of the identities of the subjects willing to access a given resource in a given environment. From AAA solutions to the de facto XACML standard, the policy-based management model has been improved bringing a real and consistent approach to overcome the issues related to the interoperability of open identity and access management systems.