Abstract: A system and methods for modeling and analyzing Quality of Service (QoS) characteristics of federated cloud services in an open eco-system is disclosed. A plurality of system entities of a federated service system are identified, and each of the system entities is classified to provide a plurality of entity classifications. A plurality of inter-entity relationships of the system entities are identified, and each of the inter-entity relationships is classified as a primitive model to provide a plurality of inter-entity relationship classifications. A composite model of the federated service system comprising the system entities, the entity classifications, the inter-entity relationships, and the inter-entity relationship classifications is generated.

Abstract: A method of defining policies for controlling access to resources of a system. Authorization requirements for the system are modeled to obtain a model expressing each of a plurality of access control policies as a constraint. From the model is generated a single policy set in an authorization markup language that captures the requirements. This method can be used to define role-based access control policies in a format that can be adapted for input to a variety of access control mechanisms. This generative approach to access control design allows maintenance to be performed at the requirements level.