ACCESS CONTROL BASED ON ATTRIBUTE CERTIFICATES.

In this paper we discuss a n access control security architecture based on Attribute Certificates for encapsulating authorisation information as well as an implementation of this architecture. The suggested architecture allows a more rapid, transparent and standardised deployment of future access control services on the Internet. We focus on the access decision function in this architecture and the authorisation information it depends upon. This work reflects our experiences within the HARP (Harmonization For The Security Of Web Technologies And Applications); IST-Project project partly funded by the European Union. [ABSTRACT FROM AUTHOR]