Computer Security – ESORICS 2007

Volume 4734 of the series Lecture Notes in Computer Science pp 531-546

A Policy Language for Distributed Usage Control

  • M. HiltyAffiliated withInformation Security, ETH Zurich
  • , A. PretschnerAffiliated withInformation Security, ETH Zurich
  • , D. BasinAffiliated withInformation Security, ETH Zurich
  • , C. SchaeferAffiliated withDoCoMo Euro-Labs, Munich
  • , T. WalterAffiliated withDoCoMo Euro-Labs, Munich

* Final gross prices may vary according to local VAT.

Get Access


We present the Obligation Specification Language (OSL), a policy language for distributed usage control. OSL supports the formalization of a wide range of usage control requirements. We also present translations between OSL and two rights expression languages (RELs) from the DRM area. These translations make it possible to use DRM mechanisms to enforce OSL policies. Furthermore, the translations enhance the interoperability of DRM mechanisms and allow us to apply OSL-specific monitoring and analysis tools to the RELs.