From ABAC to ZBAC: The Evolution of Access Control Models

摘要

Several attempts at using the Services Oriented Architecture (SOA) have failed to achieve their goals of scalability, security, and manageability. These systems, which base access decisions on the authentication of the requester, have been found to be inflexible, do not scale well, and are difficult to use and upgrade. In this paper we describe how access control models have evolved to solve manageability problems as the systems we used have scaled up in size and as they have become more distributed. We then introduce an approach to access control that solves the problems we see today and show that this approach is a natural extension of previous methods.