An access control model for multidomain collaborative environments based on shared permittions

An access control model for multidomain collaborative environments based on shared permittions is presented. The model can realize secure resource sharing and interoperation among different domains. It classifies permissions of an administrative domain into two categories: private permissions that can only be accessed by subjects within the domain, and sharing permissions which can be shared by other domains. Security administrators can define constraints for a sharing permission according to its sensitivity. The enforcement of these constraints supports the least privilege principle among domains. The secure interoperation requirements among different domains can be expressed by the definition of inter-domain authorization policies. Finally, the authorization steps for different domains are given.