Definition
An
administrative domain is a
service providerA service provider is an entity that provides services to other entities. Usually, this refers to a business that provides subscription or web service to other businesses or individuals. Examples of these services include Internet access, Mobile phone operators, and web application hosting...
holding a
securitySecurity is the degree of protection against danger, damage, loss, and crime. Security as a form of protection are structures and processes that provide or improve security as a condition. The Institute for Security and Open Methodologies in the OSSTMM 3 defines security as "a form of protection...
repositoryRepository commonly refers to a location for storage, often for safety or preservation.Repository may also refer to:* Repository clone, concept from distributed revision control...
permitting to easily
authenticateAuthentication is the act of confirming the truth of an attribute of a datum or entity...
and
authorizeAuthorization is the function of specifying access rights to resources, which is related to information security and computer security in general and to access control in particular. More formally, "to authorize" is to define access policy...
clients with credentials.
This particularly applies to computer network security.
This
conceptThe word concept is used in ordinary language as well as in almost all academic disciplines. Particularly in philosophy, psychology and cognitive sciences the term is much used and much discussed. WordNet defines concept: "conception, construct ". However, the meaning of the term concept is much...
is captured by the 'AdminDomain'
classIn object-oriented programming, a class is a construct that is used as a blueprint to create instances of itself – referred to as class instances, class objects, instance objects or simply objects. A class defines constituent members which enable these class instances to have state and behavior...
of the GLUE
information modelAn information model in software engineering is a representation of concepts, relationships, constraints, rules, and operations to specify data semantics for a chosen domain of discourse...
.
Implementation
It may be implemented as a collection of
hostIn the context of client-server architecture, a server is a computer program running to serve the requests of other programs, the "clients". Thus, the "server" performs some computational task on behalf of "clients"...
s and routers, and the interconnecting network(s), managed by a single administrative authority.
InteroperationIn engineering, interoperation is the setup of ad hoc components and methods to make two or more systems work together as a combined system with some partial functionality during a certain time, possibly requiring human supervision to perform necessary adjustments and corrections.This contrasts to...
between different administrative domains having different
securitySecurity is the degree of protection against danger, damage, loss, and crime. Security as a form of protection are structures and processes that provide or improve security as a condition. The Institute for Security and Open Methodologies in the OSSTMM 3 defines security as "a form of protection...
repositories, different
security softwareSecurity software is a generic term referring to any computer program or library whose purpose is to secure a computer system or computer network. Types of security software include:* Antivirus software* Anti keylogger* Cryptographic software...
or different security policies is notoriously difficult. Therefore, administrative domains wishing ad hoc
interoperationIn engineering, interoperation is the setup of ad hoc components and methods to make two or more systems work together as a combined system with some partial functionality during a certain time, possibly requiring human supervision to perform necessary adjustments and corrections.This contrasts to...
or full
interoperabilityInteroperability is a property referring to the ability of diverse systems and organizations to work together . The term is often used in a technical systems engineering sense, or alternatively in a broad sense, taking into account social, political, and organizational factors that impact system to...
have to build a
federationA Federation is multiple computing and/or network providers agreeing upon standards of operation in a collective fashion. The term may be used when describing the inter-operation of two distinct, formally disconnected, telecommunications networks that may have different internal structures...
.