First Steps in Transferring the Policy Machine Technology: Policy Machine Architecture and Functional Specification (PMAFS)

IAI proposes to first develop the functional specification and architecture for the Policy Machine that can be deployed on a local machine as well as a networked platform such as LAN, web services, clouds etc. The policy machine at its core is a meta-data (attribute) based access control engine which utilized policy-based rules to allow or dis-allow use of resources. The attributes may belong to either the requester or the resources, and may depend on context. Ultimately, the Policy Machine will extend its enforcement mechanism not only over access requests in which all resources are desktop ¿based but also over access requests in which the desired resources are objects that reside on another computer system and that would be accessed over the network.