[Fiware-technical-committee] Introducing Anubis PEP

[Federico Michele Facca]

Dear Juanjo, TSC members,

Martel in the past months has been working on an Open Policy Agent based
Policy-Enforcement-Proxy called Anubis (
https://github.com/orchestracities/anubis). We think the current POC is
mature enough to be demoed at the TSC and we would like to discuss some of
the roadmap aspects with you to steer next developments.

One of the key point we think is interesting, is that policies (different
from XACML, for example) are totally decoupled from the API design, and
this allow for example, to express a policy once (e.g. user A can read
entity B), and then the by simply configuring the mapping from policy to
API is possible to apply the same policy for accessing a given entity to
different APIs. (for example one policy for both NGSI-LD and NGSI-v2 apis,
or 1 policy for Device Model entity and IoT agents).

Important aspects that we want to explore next include:
- policy "portability" -> when a user accesses an entity, responder header
will include a
  description of the policies available to him (using W3C WAC inspired
annotation).
- sync of policies across different anubis nodes

We will be happy to present it at one of the next meeting (after 5th april
of course it's better)

Best,
Federico

*Dr. FEDERICO MICHELE FACCA*
*CTO, Head of Martel Lab*
+41 788075838
*MARTEL INNOVATE* <https://www.martel-innovate.com/> - INNOVATION, WE MAKE
IT HAPPEN
Click *HERE* to download Martel reports and white papers!
<https://www.martel-innovate.com/premium-content/>
Follow us on *TWITTER* <https://twitter.com/Martel_Innovate>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-technical-committee/attachments/20220316/e3f811fe/attachment.html>