Design of a cross-domain privilege management prototype system

In order to implement resource sharing and security cooperation among domains in distributed environment, cross-domain authorization and access control become core issues. The existing privilege management product implement cross-domain authorization by directly issuing attribute certificate to foreign entities, which can¿t satisfy the security requirement of dynamic and open distributed environment. The IRBAC 2000 model accomplish interoperation flexibly by dynamic inter-domain role mapping, based on this model, a new cross-domain privilege management prototype system (CD-PMPS) is proposed, and its working process is given, so that the cross-domain authorization issue can be easily resolved.