Christopher Alm

Organizational Control Architecture (ORKA): From static rights management to dynamic organization-based control.

The goal of ORKA is to develop a fine-grained authorization architecture that goes together with enterprise IT infrastructures including workflow environments and service oriented architectures. We strive for combining policy validation capabilities, ability to enforce a wide range of organizational control principles in a direct, elegant and concise way, and suitability for daily use in an enterprise setting.

• Security Models and Policy Languages
• Role-Based Access Control
• Authorization Management
• Authorization Constraints

• Additional Interest:
  • Formal Methods
  • Cryptography
  • Applied Software Security
  • OS Security, Unix