On the composition of access control management in multidomain environment

Secure interoperation between separately administrated domains, is becoming one of the major challenges in multidomain environments. In fact, many companies extend their business beyond traditional boundaries. To perform their tasks, employees must work from everywhere, and have access to applications belonging to other business units, suppliers, partners and affiliates. This is the case of most ubiquitous computing systems. As very little work has been done on the composition of separately administrated heterogeneous access control policies, so very few information are available on the subject. We present in this paper a survey on composition methods of access control management as well as mathematical proofs and complexity of composition methods. the complexity results prove that, even for a small number of domains and users in each domain the problem can be very complex.