A Stateless Network Architecture for Inter-enterprise Authentication, Authorization and Accounting

Proceedings of the International Conference on Web Services

Volumn , Issue , 2003, Pages 235-242

  Kung, H T ^a   Zhu, F ^a   Iansiti, M ^a  

^a HARVARD UNIVERSITY   (United States)

Author keywords

Accounting; Authentication; Authorization; Business network infrastructure; Stateless systems; Web services

Indexed keywords

COMPUTER ARCHITECTURE; IDENTIFICATION (CONTROL SYSTEMS); INDUSTRIAL APPLICATIONS; NETWORK PROTOCOLS; SECURITY OF DATA; SERVERS; XML;

ACCOUNTING; AUTHENTICATION; AUTHORIZATION; BUSINESS NETWORK INFRASTRUCTURE; STATELESS SYSTEMS; WEB SERVICES;

INTERNET;

EID: 1642399823     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Lynch, C., A white paper on authentication and access management issues incross-organizational use of networked information resources, Coalition for Networked Information, April 1998. http://www.cni.org/projects/authentication/authenticationwp.html
2. Levijoki, S., Authentication, authorization and accounting in ad hoc networks, May 2000. http://www.tml.hut.fi/Opinnot/Tik-110.551/2000/papers/authentication/aaa.htm
3. Vollbrecht, J., et al., RFC 2905, "AAA authorization application examples", August 2000. ftp://ftp.isi.edu/in-notes/rfc2905.txt
4. Novell simplifies, personalizes net experience with Novell Portal Services, press release, March 19, 2001. http://www.novell.com/news/press/archive/2001/03/pr01023.html
5. Haught, D., Designing commercial Web services: Part I - security and flexibility with the .NET framework, http://www.aspnetpro.com/features/2002/01/asp200201dh_f/asp200201dh_f.asp
6. Costello, S., Researcher; DDoS attacks are growing threats, IDG News Service, June 2001. http://www.nwfusion.com/news/2001/0606ddos.html
7. MacVittie, L., Microsoft keys in on the enterprise, March 13, 2002. http://www.networkcomputing.com/1310/1310buzzl.html
8. Securing the broadband cable network, RSA e-security Today, Vol. 2, No. 4, October 2001. http://www.rsasecurity.com/newsletter/v2n4/broadband.html
9. Liberty architecture overview version 1.1, January 15, 2003. http://www.projectliberty.org/specs/liberty-architecture-overview-v1.1.pdf
10. Westmacott, I., The stateful Web, Computer Publishing Group, 1998. http://webserver.cpg.com/features/cover/3.5/
11. Cisco AAA case study overview, http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/secsols/aaasols/ c262c1.htm - 2418
12. System authentication plug-ins, Windows Media Services, http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmsrvsdk/htm/ wmsauthenticationplugins.asp
13. .NET Passport: Balanced authentication solutions, Microsoft Corporation, http://www.microsoft.com/net/downloads/net_passport.doc
14. Microsoft's federated security and identity roadmap, Microsoft Corporation, June 2002. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwebsrv/html/ wsfederate.asp
15. Glass, B., Is Microsoft's "TrustBridge" really "HackerBridge"?. http://www.extremetech.com/article2/0,3973,55154,00.asp
16. Kaneshige, T., Microsoft's TrustBridge reveals roadmap for Web-services security products; analyst wonders whether Microsoft can truly be 'trusted', http://www.line56.com/articles/default.asp?ArticleID=3735
17. Fontana, J., Microsoft touts tighter Web services security. http://www.nwfusion.com/news/2002/0610microsoft.html
18. Microsoft Windows "TrustBridge" to enable organizations to share user identities across business boundaries, June 6, 2002. http://www.microsoft.com/presspass/press/2002/Jun02/06-06TrustbridgePR.asp
19. Windows 2000 authentication, http://www.windowsitlibrary.com/Content/617/06/2.html
20. Kerberos: The Network Authentication Protocol. http://web.mit.edu/kerberos/www/
21. Kerberos V5 authentication, http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/ windowsserver2003/proddocs/standard/sag_SEconceptsUnAuthKerb.asp