Policy algebra for access control in enterprise document management systems

The main problem of rights restriction in enterprise document management systems (EDMS) is the large variability of securable objects and subjects that affect the logical check of access. Here, a method to solve this problem based on policy algebra for logic management using security policies is proposed. In the proposed approach, the ability to call any document operation is checked by logical rules. Numerous operations that can be performed over a range of security policies are defined. The proposed policy algebra has been realized in enterprise document management system «Euphrates» and can provide flexible rights management, regardless of the model of access control.