Study on the Security Policy Management Framework in Multi-domain Environment

The security policies play important roles in information security and trusted computing environments.An extensible and de-centralized security policy management framework was proposed to manage security policies consistently in multi-domain environments.This framework employs a common,precise and neutral specification language of security policies to describe security policies,analyzes the security models and its policies to extract policy semantics,and builds a security policies model framework to perform a universal API to manage and control the access,authorization,cryptograph,confidentiality,integrity and availability among the policies of different domain,entities and facilities.A basic framework of security policies was implemented in Java language.