The category-based meta-model of access control has recently been extended to accommodate distributed access control. The goal of this work is to define mechanisms for the evaluation of access requests in a distributed environment and show how properties of a security policy can be verified in this framework. To demonstrate the expressivity of the model, a case study will be developed based on a web-based banking application, implementing a combination of access control models.

The goal of this project is to develop a Java application using the Category-based authorisation model.