Study of high efficiency of evaluation of a PDP in authorization service

In authorization service, the efficiency of evaluation of a PDP(policy decision point) is a key issue that affects the efficiency of authorization service. However, the efficiencies of evaluation of many PDPs available are frequently influenced by the factors of conditions in rules. Said Marouf et al put forward a method in which the evaluation speed can be increased by adjusting the rules in policies according to user history access records. This paper analyzes the shortcomings of this method in real-time applications, and proposes that the rules order in policies can be instantaneously adjusted by user history access records and indexes as well as self-adaptation are added to a PDP so that the evaluation speed can be increased substantially. Experimental results indicate that when there are 9795 rules in a PDP, the evaluation time and the time consumption taken for a PDP applied with indexes and self-adaptation to complete an authorized operation call are shortened by 93.33％ and 76.32％ respectively, compared with those for a PDP which is not applied with indexes and self-adaptation. When the number of repeat visits from the same user is 7, the time consumption taken for a PDP applied with indexes and adaptation to complete an authorized operation call is shortened by 24.29％ compared with that for a PDP which is applied with indexes only.