Delegation constraint management

The paper addresses the issue of providing\ud access control via delegation and constraint management across multiple security domains. Specifically, this\ud paper proposes a novel Delegation Constraint Management model to manage and enforce delegation constraints\ud across security domains. An algorithm to trace the authority of delegation constraints is introduced as well\ud as an algorithm to form a delegation constraint set and\ud detect/prevent potential conflicts. The algorithms and\ud the management model are built upon a set of formal\ud definitions of delegation constraints. In addition, a constraint profile based on XACML is proposed as a means\ud to express the delegation constraint. The paper also includes a protocol to exchange delegation constraints (in\ud the form of user commitments) between the involved\ud entities in the delegation process