Access control failures in information sharing cause incidents and disasters can follow in their trails. Wikileaked state secrets, tabloid publicity for VIP health records, trade secrets sent to the competition - poorly designed access controls are the common denominator of them all. Extensible authorization offers a solution.

Use cases in many industries

Secure information sharing is an important objective in many different types of use cases such as:

Information sharing

  • Public sector knowledge sharing is a new discipline expected to bring a broad set of essential values such as efficiency and cost savings in public administration. Since data managed by state agencies typically is about its citizens - about you and me - privacy protection becomes a serious concern that must be balanced against information sharing needs.
  • Product life-cycle management means corporations collaborate across company borders as well as across national borders to achieve faster and more efficient delivery of services and goods. The data managed represents substantial intellectual properties which need to be protected in compliance with regulations such as export control legislation and balanced against information sharing needs.  

With coarse-grained authorization secure information sharing becomes impossible. You can disregard the fact that your information objects contain sensitive portions and accept being exposed to the risk of unauthorized access. Or you can ban any publishing of information objects which sensitive portions and thus lose the ability to collaborate.

Use cases such as IP or privacy protection require the ability to filter out information based on individual fields or portions of your data. If you can filter out the sensitive parts, you enable secure sharing of what remains.  This type of filtering must often be made in multiple dimensions and varies depending on who the user is and what type of relation the user has to referenced objects or data subjects.

Use cases of this type are frequent in government agencies and health care. But modern product life-cycle management is also an example of new information sharing needs. 

Search


The XACML Value Proposition

Cost savings may not be your primary reason to look for standards-based and fine-grained access control. It is, however, a predominant side-effect. Once you achieve secure information sharing you also enable new business opportunities. Read more...

Standards-based solutions

Cloud, mobile computing, multiple user identities, etcetera, are all factors that in the past, required an individual approach to access control. With XACML, standards-based authorization solutions can now encompass virtually any technology. Read more...

Trusted solutions provider

Axiomatics solutions can be found in use at leading global entities within finance, manufacturing, healthcare, and the public sector. Our trusted technology has been consecutively chosen for the world's largest XACML deployments. Read more...

Technology

Axiomatics is a driving force in authorization technology. The company's dedicated research hub boasts many of the world's leading experts in XACML, the standard that powers attribute based access control (ABAC), while the Axiomatics CTO is the editor of the OASIS XACML 3.0 specification. Furthermore, Axiomatics was the first organization to attest complete XACML 3.0 speciication conformance.

ABAC

Attribute-Based Access Control (ABAC) surpasses all previous authorization models. It provides easily scalable, dynamic, context-aware and risk-intelligent access control, essential for the modern enterprise.

Solutions

Axiomatics solutions deliver anywhere, any-depth access control across virtually any and every IT environment. They enable secure sharing of information across and within organization's borders and boundaries and compliance with ever-evolving regulatory mandates, while promoting new business opportunities, reducing time-to-market and cutting IT development costs.

eXtensible Authorization

Axiomatics solutions bring together the benefits of standardization, through XACML, with the proven results of externalized authorization. This is more commonly known as eXtensible Authorization.