CSDL Home P POLICY 2006 Proceedings. Seventh IEEE International Workshop on Policies for Distributed Systems and Networks
June 5, 2006 to June 7, 2006
David W Chadwick , University of Kent, UK
Linying Su , University of Kent, UK
Oleksandr Otenko , University of Kent, UK
Romain Laborde , University of Kent, UK
For distributed applications, using a centralised policy decision point (PDP) with a common policy allows coordination between multiple resources that are being accessed. But the central PDP is a bottleneck to performance because every request needs to be diverted to it. Having a set of distributed PDPs co-located with resources can overcome the performance bottleneck, but any form of coordination is then lost. Furthermore, even a centralised PDP sometimes needs to coordinate its access control decision making over time. Therefore, coordination between decision making, for both centralised and distributed PDPs, is needed. This paper addresses issues of coordination between distributed or centralised decision making, by examining when coordination is needed, providing a conceptual model for coordination, defining policy elements that can control coordination, and rules for the refinement of coordination policies The paper provides a detailed example of coordination policy refinement, and provides an outline of how we are implementing the model in our system.
David W Chadwick, Linying Su, Oleksandr Otenko, Romain Laborde, "Coordination between Distributed PDPs", POLICY, 2006, Proceedings. Seventh IEEE International Workshop on Policies for Distributed Systems and Networks, Proceedings. Seventh IEEE International Workshop on Policies for Distributed Systems and Networks 2006, pp. 163-172, doi:10.1109/POLICY.2006.14