A Dynamic Reconciliation Service of RBAC Policies for Virtual Organizations

Service-oriented applications are naturally linked to virtual organizations (VO) that are used as an effective means to support collaboration across multiple autonomous domains. Participating domains of a VO may change their authorization policies for many reasons, which can bring conflicts to the VO´s authorization policies and lead to unavailability of shared resources. In this paper, an adaptive policy reconciliation framework for VOs is proposed, which can dynamically keep VO´s authorization polices consistent with changed local policies in order to maintain the availability of shared resources. And we present algorithms on how to revise VO´s policies to conform to domain policies, and discuss their effectiveness.