restrictingkeyusewithxacmlforaccesscontrol

restrictingkeyusewithxacmlforaccesscontrol内容摘要：

ommon terms  PAP – Policy Administration Point. This would be the EKM  PDP Policy Decision Point. An entity that evaluates an access request against one or more policies to produce an access decision. This is essentially a rules engine.  PEP – Policy Enforcement Point. An entity that enforces access control for one or more resources. When a resource access is attempted, a PEP sends an access request describing the attempted access to a PDP. The PDP returns an access decision that the PEP then enforces.  Policy – A set of rules indicating which subjects are permitted to access which resources using which actions under which conditions. XACML has two different schema elements used for policies: Policy and PolicySet. A Policy contains actual access control rules. 7 Typical XACML ponents PEPc on tex tha nd l er4 . r e q u e s tn o t if ic a t ionP IP6 . a t t r ibu t equery1 1 . r e s p o n s ec o n t e x t1 . p o li c y8 . a t t r ibu t een v i r on m en tr es ou r c es ub j ec。