An Algebra for Composing Access Control Policies in Grid

Policy composition is an essential requirement of grid access control, not only because of the integrity of local and global policies, but also the dynamic collaboration under jointly controlled policies among multiple partners across different domains. In this paper, we propose an algebra for compositing attribute-based access control policies. Traditional arithmetic operators are extended and semantically redefined, as well as new operators are introduced to satisfy unique grid scenarios. The powerful expressiveness of our proposed algebra is illustrated by applying to scenarios and comparing with related works.