Attribute mapping for cross-domain access control

Role mapping theory is an attracting approach for cross-domain authorization (access control). However, it is only applicable to domains that employ role-based access control (RBAC) model. In this paper, an attribute mapping theory for cross-domain authorization is introduced. It is based upon attribute-based access control (ABAC) model, and expressed in terms of attribute mapping rules. It is a general cross-domain authorization approach that accommodates various kinds of access control models. Furthermore, method to optimize the attribute mapping rules is proposed, and an implementation of the attribute mapping theory is presented.