SNIP_ADAPTIVE_CAN_FIGURE_Figure_3_32

Figure 3.32: Access policy enforcement based on the Subject ID from the network binding The access control process aims at enforcing policies on the relation between a “Subject” and an “Object”. In the example where an remote Machine makes calls to a service interface, the remote Machine is the Subject and the method of a ServiceInterface is the Object. The access control process comprises of the two main operations, namely , Authentication and Authorization, which are mostly independent.