The security policies play important roles in information security and trusted computing environments. An extensible and de centralized security policy management framework was proposed to manage security policies consistently in multi domain environments. Ｔhis framework employs a common, precise and neutral specification language of security policies to describe security policies， analyzes the security models and its policies to extract policy semantics, and builds a security policies model framework to perform a universal API to manage and control the access, authorization, cryptograph, confidentiality, integrity and availability among the policies of different domain, entities and facilities. A basic framework of security policies was implemented in Java language.
