摘要 |
For allowing an effective handling of obligations a method for access control within a network, especially for control of access of a subject to a resource of the network, is claimed, wherein a PEP (Policy Enforcement Point) sends an access request for evaluation to a PDP (Policy Decision Point) and wherein the PDP may send a reply which may contain at least one obligation to the PEP. The method is characterized in that for specifying obligations a meta-language is used. Further, an according network is claimed, preferably for carrying out the above mentioned method. |