On context in authorization policy

Research output: Contribution to conferencePaperpeer-review

53 Scopus citations


Authorization policy infrastructures are evolving with the complex environments that they support. However, the requirements and technologies supporting context are not yet well understood. Often implemented as condition functions or predefined attributes, context is used to more precisely control when and how policy is enforced. This paper considers context requirements and services in authorization policy. The properties and security requirements of context evaluation are classified. A key observation gleaned from this classification is the degree to which context functions share common properties. The Antigone Condition Framework (ACF) exploits these commonalities to provide a general purpose condition service and associated API. The prototype ACF design is presented and illustrated, and directions for future work considered.

Original languageEnglish (US)
Number of pages10
StatePublished - 2003
EventProceedings of Eighth ACM Symposium on Access Control Models and Technologies - Villa Gallia, Como, Italy
Duration: Jun 2 2003Jun 3 2003


OtherProceedings of Eighth ACM Symposium on Access Control Models and Technologies
CityVilla Gallia, Como

All Science Journal Classification (ASJC) codes

  • General Computer Science


Dive into the research topics of 'On context in authorization policy'. Together they form a unique fingerprint.

Cite this