{"id":"https://openalex.org/W4411995810","doi":"https://doi.org/10.1145/3734436.3734457","title":"Coordinated Enforcement of Obligations in Distributed Usage Control Systems [Work In Progress Paper]","display_name":"Coordinated Enforcement of Obligations in Distributed Usage Control Systems [Work In Progress Paper]","publication_year":2025,"publication_date":"2025-07-03","ids":{"openalex":"https://openalex.org/W4411995810","doi":"https://doi.org/10.1145/3734436.3734457"},"language":"en","primary_location":{"id":"doi:10.1145/3734436.3734457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3734436.3734457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3734436.3734457","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011078386","display_name":"Hussein Joumaa","orcid":null},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]},{"id":"https://openalex.org/I4210129353","display_name":"Huawei Technologies (Germany)","ror":"https://ror.org/038cdme44","country_code":"DE","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353"]}],"countries":["DE","IT"],"is_corresponding":false,"raw_author_name":"Hussein Joumaa","raw_affiliation_strings":["Department of Information Engineering and Computer Science, University of Trento, Trento, Italy and Huawei Technologies Duesseldorf GmbH, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0009-5684-1689","affiliations":[{"raw_affiliation_string":"Department of Information Engineering and Computer Science, University of Trento, Trento, Italy and Huawei Technologies Duesseldorf GmbH, Munich, Germany","institution_ids":["https://openalex.org/I193223587","https://openalex.org/I4210129353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087934959","display_name":"Ali Hariri","orcid":"https://orcid.org/0000-0002-1985-6496"},"institutions":[{"id":"https://openalex.org/I4210129353","display_name":"Huawei Technologies (Germany)","ror":"https://ror.org/038cdme44","country_code":"DE","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ali Hariri","raw_affiliation_strings":["Huawei Technologies Duesseldorf GmbH, Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1985-6496","affiliations":[{"raw_affiliation_string":"Huawei Technologies Duesseldorf GmbH, Munich, Germany","institution_ids":["https://openalex.org/I4210129353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018366807","display_name":"Theo Dimitrakos","orcid":"https://orcid.org/0000-0002-9522-1863"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]},{"id":"https://openalex.org/I4210129353","display_name":"Huawei Technologies (Germany)","ror":"https://ror.org/038cdme44","country_code":"DE","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353"]}],"countries":["DE","GB"],"is_corresponding":false,"raw_author_name":"Theo Dimitrakos","raw_affiliation_strings":["Huawei Technologies Duesseldorf GmbH, Munich, Germany and School of Computing, University of Kent, Canterbury, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-9522-1863","affiliations":[{"raw_affiliation_string":"Huawei Technologies Duesseldorf GmbH, Munich, Germany and School of Computing, University of Kent, Canterbury, United Kingdom","institution_ids":["https://openalex.org/I20581793","https://openalex.org/I4210129353"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076845058","display_name":"Bruno Crispo","orcid":"https://orcid.org/0000-0002-1252-8465"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Bruno Crispo","raw_affiliation_strings":["Department of Information Engineering and Computer Science, University of Trento, Trento, Italy"],"raw_orcid":"https://orcid.org/0000-0002-1252-8465","affiliations":[{"raw_affiliation_string":"Department of Information Engineering and Computer Science, University of Trento, Trento, Italy","institution_ids":["https://openalex.org/I193223587"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.9991,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.97254547,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"57","last_page":"61"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.672173023223877},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.6279159784317017},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5953574776649475},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.508073091506958},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49100831151008606},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15088346600532532},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.10302713513374329},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.08789992332458496}],"concepts":[{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.672173023223877},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.6279159784317017},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5953574776649475},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.508073091506958},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49100831151008606},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15088346600532532},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.10302713513374329},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.08789992332458496},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3734436.3734457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3734436.3734457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3734436.3734457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3734436.3734457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W275520793","https://openalex.org/W1952296671","https://openalex.org/W2011845647","https://openalex.org/W2065859092","https://openalex.org/W2068189899","https://openalex.org/W2156665807","https://openalex.org/W2163595397","https://openalex.org/W3021142599","https://openalex.org/W3096533759","https://openalex.org/W4282578968","https://openalex.org/W4313480746","https://openalex.org/W4399993319"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Access":[0,33],"and":[1,31,97,109,131,140,152,160],"usage":[2],"control":[3],"have":[4],"evolved":[5],"to":[6,80,90,122,154,156],"include":[7],"obligations,":[8],"which":[9],"are":[10,44],"mandatory":[11],"actions":[12],"that":[13,39,56,168],"must":[14],"be":[15,59,66],"fulfilled":[16,60],"as":[17,25],"part":[18],"of":[19,88,128,137],"authorization":[20,158],"decisions.":[21],"However,":[22],"standards":[23],"such":[24],"Abbreviated":[26],"Language":[27,36],"For":[28],"Authorization":[29],"(ALFA)":[30],"eXtensible":[32],"Control":[34],"Markup":[35],"(XACML)":[37],"specify":[38],"Policy":[40],"Enforcement":[41,141],"Points":[42],"(PEPs)":[43],"responsible":[45],"for":[46,112],"enforcing":[47],"obligations":[48,57],"but":[49],"leave":[50],"execution":[51,93,153],"aspects":[52],"unspecified.":[53],"They":[54],"assume":[55],"will":[58],"without":[61],"addressing":[62],"how":[63],"enforcement":[64,73,78,92,176],"should":[65],"carried":[67],"out.":[68],"This":[69],"paper":[70],"introduces":[71],"an":[72],"framework":[74],"based":[75],"on":[76],"structured":[77],"messages":[79,89],"address":[81],"these":[82,146],"challenges.":[83],"It":[84],"defines":[85],"two":[86],"types":[87],"coordinate":[91],"across":[94,145,178],"PEPs:":[95],"Declaration":[96],"Execution":[98],"Records.":[99],"These":[100],"records":[101],"provide":[102],"information":[103],"about":[104],"PEP":[105],"capabilities,":[106],"action":[107],"dependencies,":[108],"fallback":[110],"strategies":[111],"synchronized":[113],"enforcement.":[114,132,161],"Secondly,":[115],"we":[116,163],"propose":[117],"a":[118,165],"hierarchical":[119],"policy":[120,129,150,172],"model":[121,134],"separate":[123],"concerns":[124],"between":[125],"the":[126,157,170],"functionality":[127],"logic":[130,177],"The":[133],"is":[135],"composed":[136],"Governance,":[138],"Authorization,":[139],"Policies.":[142],"Constraints":[143],"flow":[144],"three":[147,171],"levels,":[148],"allowing":[149],"selection":[151],"adapt":[155],"context":[159],"Finally,":[162],"illustrate":[164],"high-level":[166],"architecture":[167],"integrates":[169],"layers":[173],"with":[174],"distributed":[175],"multiple":[179],"PEPs.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}