Access control and authorization plan for customer control of network services

One challenge for future network service systems is to make customer control feasible while ensuring the security of both the customer´s service and the control system itself. The author addresses the security problems that result from direct customer control. He argues that simple security mechanisms, such as access control lists, used in general-purpose computer systems are insufficient for administration control and authority delegation in network service systems. He proposes a security policy called an authorization policy that is suitable for both ensuring network security and facilitating administration and authorization control. This security policy is enforced through a unified protection mechanism called an access control hierarchy. An example is given to demonstrate the application of this access control hierarchy in existing network services