Analysis of Liberty Single-Sign-on with Enabled Clients

IEEE Internet Computing

Volumn 7, Issue 6, 2003, Pages 38-44

  Pfitzman, Birgit ^a   Waidner, Michael ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

SECURE SOCKETS LAYER (SSL); TRANSPORT-LAYER SECURITY (TLS);

COSTS; CRYPTOGRAPHY; HTTP; SECURITY OF DATA; WEB BROWSERS; WEBSITES; WORLD WIDE WEB;

NETWORK PROTOCOLS;

EID: 1142301938     PISSN: 10897801     EISSN: None     Source Type: Journal    
DOI: 10.1109/MIC.2003.1250582     Document Type: Article

References (14)

1. P. Hallam-Baker and E. Malers, eds., "Assertions and Protocol for the Oasis Security Assertion Markup Language (SAML)," Oasis standard, Nov. 2002; www.oasis-open. org/committees/security/docs/cs-sstc-core-01.pdf.
2. P. Mishra, ed., "Bindings and Profiles for the Oasis Security Assertion Markup Language (SAML)," Oasis standard, Nov. 2002, www.oasis-open.org/committees/security/docs/cs-sstc-bindings-01.pdf.
3. M. Erdös and S. Cantor, "Shibboleth Architecture Draft v05," May 2002; http://shibboleth.internet2.edu/docs/draft-internet2-shibboleth-arch-v05.pdf.
4. Liberty Alliance Project, "Liberty Architecture Overview," v1.0, 11 July 2002; www.projectliberty.org.
5. Liberty Alliance Project, "Liberty Bindings and Profiles Specification," v1.0, 11 July 2002; www.projectliberty.org.
6. A.J. Menezes, P.C. van Oorschot, and S.A. Vanstone, Handbook of Applied Cryptography, CRC Press, 1997.
7. Liberty Alliance Project, "Liberty Version 1.0 Errata," ed. 00, 11 Oct. 2002, www.projectliberty.org/specs/archive/v1_0/draft-liberty-version-1-errata-00.pdf.
8. D. Box et al., "Simple Object Access Protocol (SOAP) 1.1," W3C note, May 2000; www.w3.org/TR/SOAP.
9. Liberty Alliance Project, "Liberty Protocols and Schemas Specification," v1.0, 11 July 2002; www.projectliberty.org.
10. A. Nadalin et al., eds., "Web Services Security: SOAP Message Security," Oasis working draft, Aug. 2003; www.oasis -open.org/committees/download.php/3281/WSS-SOAP MessageSecurity-17-082703-merged.pdf.
11. M. Abadi and R. Needhara, "Prudent Engineering Practice for Cryptographic Protocols," IEEE Trans. Software Eng., vol. 22, no. 1, 1996, pp. 6-15.
12. Federal Trade Commission, "Microsoft Settles FTC Charges Alleging False Security and Privacy Promises," 8 Aug. 2002, www.ftc.gov/opa/2002/08/microsoft.htm.
13. D.P. Kormann and A.D. Rubin, "Risks of the Passport Single Signon Protocol," Computer Networks, Elsevier Science Press, vol. 33, 2000, pp. 51-58.
14. B. Pfitzmann and M. Waidner, "Privacy in Browser-Based Attribute Exchange," Proc. ACM Workshop on Privacy in the Electronic Soc. (WPES), ACM Press, 2003, pp. 52-62.