Policy Implementation in XACML

Abstract

This chapter presents the implementation details of the PrimeLife policy engine (called PPL engine). This engine is primarily in charge of interpreting the policies and the preferences defined by the Data Controllers and the Data Subjects. Additionally, this engine is responsible for the enforcement of the privacy rules specified by the user. The enforcement is characterised by the application of the access control rules, the execution of the obligations and the generation/verification of the cryptographic proof related to the credentials. In this chapter we describe the architecture of this engine, the structure of policy language, and finally the data model of the implementation.