HERAS^AF XACML PIP

The Policy Information Point component is responsible for looking up attributes that are missing in the provided request.

The lookup can be done either in the PDP during evaluation or in the PEP.

Interface

The PIP interface is located in the Core component.

It is easy possible to implement a custom PIP based on our Core.

Past work

We did a PIP implementation in the past to demonstrate functionality of such a component.
We implemented two possible lookups of attributes:

• XPath
• Database