As the figure shows, both the AEF and ADF include several functional modules. The AEF contains:
1. –
Monitoring module which is used to keep track of the changes of the attributes of the subjects and objects.
2. –
Updating module which is used primarily to update the attributes of the subjects and objects.
The ADF is where all of the access granting decisions, and the access maintenance and the access termination take place. This facility includes three core modules that are utilized collectively in rendering access decisions as response to the (AEF) requests: