Policap - proposal, development and evaluation of a policy service and capabilities for Corba security

Abstract

This paper presents Policap - a Policy Service for distributed applications that use CORBA security model. Policap was proposed for insertion in the JaCoWeb Project context, which is developing an authorization scheme for large-scale networks based on CORBA security standards. The contribution of this paper is the combination of client-side and server-side access control, in a single domain. In this paper, operations of security management not currently included in the OMG standards are also proposed. The paper further presents the implementation results obtained and an evaluation of these results based on Common Criteria, ISO standard 15408.