A Dynamic Reconciliation Service of RBAC Policies for Virtual Organizations

Abstract

Service-oriented applications are naturally linked to virtual organizations (VO) that are used as an effective means to support collaboration across multiple autonomous domains. Participating domains of a VO may change their authorization policies for many reasons, which can bring conflicts to the VO's authorization policies and lead to unavailability of shared resources. In this paper, an adaptive policy reconciliation framework for VOs is proposed, which can dynamically keep VO's authorization polices consistent with changed local policies in order to maintain the availability of shared resources. And we present algorithms on how to revise VO's policies to conform to domain policies, and discuss their effectiveness.