Method of managing access control in a cloud network

An access control management method between a first entity and a second entity in a cloud network, the method comprising:

• determining whether the first and second entities belong to security domains that implement different access control policies;
• if the first and second entities belong to security domains implementing different access control policies, determining whether there exists a virtual entity establishing a relationship between said security domains by functioning as a resource within a first security domain of the first entity and functioning as a user within a second security domain of the second entity, a first access control rule between said first entity and said virtual entity within the first security domain of said first entity, the first access control rule defining access rights for the first entity to access the virtual entity, and a second access control rule between said second entity and said virtual entity within the second security domain of said second entity, the second access control rule defining access rights for the virtual entity to access the second entity;
• and if so:
• controlling access between said first and second entities as a function of said first and second access control rules.

A processor configured to manage access control between a first entity and a second entity in a cloud network, wherein said processor is configured to:

• determine whether said first and second entities belong to security domains implementing different access control policies;
• if the first and second entities belong to security domains implementing different access control policies, determining whether there exists a virtual entity establishing a relationship between said security domains by functioning as a resource within a first security domain of the first entity and functioning as a user within a second security domain of the second entity, a first access control rule between said first entity and said virtual entity within the first security domain of said first entity, the first access control rule defining access rights for the first entity to access the virtual entity, and a second access control rule between said second entity and said virtual entity within the second security domain of said second entity, the second access control rule defining access rights for the virtual entity to access the second entity;
• and if so:
• control access between said first and second entities as a function of said first and second access control rules.