Managing access in extended enterprise networks

We describe our approach to secure authentication and authorization for extended enterprises, which combines distributed role-based access control (RBAC), a public key infrastructure (PKI), and a privilege management infrastructure (PMI). We have implemented a J2EE-based prototype system, DRBAC-EE, which shows the feasibility of our approach.