Cart (Loading....) | Create Account
Close category search window
 

Federated security: lightweight security infrastructure for object repositories and Web services

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

3 Author(s)
Hatala, M. ; Sch. of Interactive Arts & Technol., Simon Fraser Univ., Surrey, BC, Canada ; Ty Mey Eap ; Ashok Shah

To realize the idea of Web services as a scalable technology, enabling access to a provider's resources for a wide range of clients, requires a similar scalable security solution. Management of user accounts for all possible clients in each provider is simply unfeasible. The alternative approach to having federated identity management is currently being developed by main software vendors. In this paper we present the design and implementation of a lightweight security infrastructure, for the federated security, that enable the establishment of a trust federation between several organizations. The infrastructure consists of an augmented security layer placed on top of the Web service protocol. The solution utilizes the latest WS-security specifications and, at the infrastructure level, is compatible with Shibboleth - a federated security solution for Web resources. In order to illustrate the potential of the infrastructure, we describe it in the context of two case studies: an object repository with complex access policies and the connection with the authenticated P2P network for learning resources.

Published in:

Next Generation Web Services Practices, 2005. NWeSP 2005. International Conference on

Date of Conference:

22-26 Aug. 2005

Need Help?


IEEE Advancing Technology for Humanity About IEEE Xplore | Contact | Help | Terms of Use | Nondiscrimination Policy | Site Map | Privacy & Opting Out of Cookies

A not-for-profit organization, IEEE is the world's largest professional association for the advancement of technology.
© Copyright 2014 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.