Marco Casassa Mont - Web Page - HP Labs

Access Control and Authorization Services (ACSIS)

The ACSIS R&D project is about a fine-grained Authorization and Access Control System for Business Communities in an Internet-based B2B environment.

ACSIS provides a fine-grained authorization framework for access control at the service level, driven by flexible authorization policies. Authorization policies are logical expressions made of constraints on user's attributes, their roles, system information, service parameters, etc. A Dynamic Authorization Server evaluated policies at run-time against requests to access services and service functions.  

A prototype was built, based on a Internet Business Community scenario and Intellectual Properties generated.