An approach to role based management for distributed systems
File(s)DTR95-9.pdf (2.93 MB)
Technical report
Author(s)
Lupu, Emil
Sloman, Morris
Type
Report
Abstract
Interpreting policy in automated managers facilitates the dynamic change of behaviour of a distributed management system by simply changing policies. This paper describes a management policy notation which can be used to define both authorisation policies (what activities a manager is permitted to do) and obligation policies (the activities a manager must perform). Some example policy specifications are given to demonstrate the notation and the concepts involved. A graphical policy editor is described which permits high level abstract policies to be refined into lower level, implementable policies and maintains derivation and dependency relationships between the different policies. A policy service which stores policies is outlined and its integration within a domain service for grouping policies is explained. Outlines are given of implementations of automated managers for interpreting obligation policies and of an access control mechanism for enforcing authorisation policies.
Date Issued
1995-01-01
Citation
Departmental Technical Report: 95/9, 1995, pp.1-23
ISSN
1469-4174
Publisher
Department of Computing, Imperial College London
Start Page
1
End Page
23
Journal / Book Title
Departmental Technical Report: 95/9
Copyright Statement
© 1995 E. Adalat. This report is available open access under a CC-BY-NC-ND (https://creativecommons.org/licenses/by-nc-nd/4.0/)
Publication Status
Published online