Automated Policy Combination for Data Sharing across Multiple Organizations

Publication Type:
Conference Proceeding
Citation:
Proceedings - 2015 IEEE International Conference on Services Computing, SCC 2015, 2015, pp. 226 - 233
Issue Date:
2015-08-17
Metrics:
Full metadata record
Files in This Item:
Filename Description Size
07207357.pdfPublished version376.29 kB
Adobe PDF
© 2015 IEEE. During business consolidation, multiple organizations need to share data for common interests. However, these organizations may apply different or even conflicting policies, on account of different rules and rule combining algorithms chosen by them. Thus, it is necessary to combine policies from multiple organizations into a global one to manage the access to the shared data. Existing policy combining approaches are unable to automatically combine policies into a global one. In this paper, we propose an approach to address the issue of multiple policies combination. Its key idea is to first decompose the rules in each policy into various classes, and then combine the rules of the corresponding classes to a global compact policy. The latter ensures compliance with each of the original policies at the syntax and semantic levels. To validate our approach, we provide a proof-of-concept implementation of the automated policy combination.
Please use this identifier to cite or link to this item: