de.fhg.aisec.ids.api.policy

Interface PDP

public interface PDP

Policy Decision Point (PDP) Interface.

The PDP decides decision requests against a policy. It may use caching to speed up the decision.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	LABELS_KEY

Method Summary

Modifier and Type	Method and Description
void	clearAllCaches() Removes all data from PDP-internal caches.
PolicyDecision	requestDecision(DecisionRequest req) Main method for requesting a policy decision.
TransformationDecision	requestTranformations(ServiceNode lastServiceNode) Requests the PDP for the result of applying a transformation function to a message.

Field Detail

LABELS_KEY

static final java.lang.String LABELS_KEY

See Also:

Constant Field Values

Method Detail

requestDecision

PolicyDecision requestDecision(DecisionRequest req)

Main method for requesting a policy decision.

The decision request states attributes of subject and resource. The result is a decision that is expected to be enforced by the PEP.

Parameters:

req - The decision request, wrapping relevant data for policy decision

Returns:

The policy decision

clearAllCaches

void clearAllCaches()

Removes all data from PDP-internal caches. Future decisions will possibly take more time.

requestTranformations

TransformationDecision requestTranformations(ServiceNode lastServiceNode)

Requests the PDP for the result of applying a transformation function to a message.

Transformation functions remove and/or add labels to messages. For non-flow-aware services, transformation functions are defined as part of the policy.

A transformation function must always applied to a message before the policy decision is requested using requestDecision.

Parameters:

lastServiceNode - The last Processor the message exchange has processed

Returns:

The label transformations to apply to the Exchange