A Collaborative Access Control Based on XACML in Pervasive Environments

Pervasive environments consist of the heterogeneous network system. And these mean environment that can be the various Web service to sharing of mutual information. However, this requires not only advance security but also districted access control. Because the indiscreet resource access bring on the problem by the mobile devices and wireless network without the time and space, pervasive access control is very important. Access control must be defines the technologies for the new service and the optimized access policy for these environments. Cooperation administration is serious point too. This requires dynamic control how to use the sharing resources. Therefore we propose collaborative access control based XACML in pervasive environments. Proposed mechanism applies to XACML of OASIS standard in pervasive environments. XACML is designed to express authorization policies in XML against objects that are themselves identified in XML. But XACML combination algorithms can not support requirement condition of collaboration. In this paper, we propose extended XACML of collaborative access control based on RBAC hierarchy.