Performance of the CMW-RBAC at CERN

The distributed control system of the LHC presents many challenges due to its inherent heterogeneity and highly dynamic nature. One critical challenge is providing access control guarantees within Controls Middleware (CMW). Role-based access control (RBAC) project at CERN was designed to protect from accidental and unauthorized access to the LHC and injector equipment. CMW-RBAC library is deployed as a part of every device server that imposes very tight constraints in terms of performance, stability and security. In this paper we present comprehensive performance evaluation of the CMW-RBAC system. We also estimate how different aspects of the access control influence the performance.