Specification and design of advanced authentication and authorization services

Computer Standards and Interfaces

Volumn 27, Issue 5, 2005, Pages 467-478

  Lopez, Javier ^a   Montenegro, Jose A ^a   Vivas, Jose L ^a   Okamoto, Eiji ^b   Dawson, Ed ^c  

^a UNIVERSITY OF MÁLAGA   (Spain)

^b Inst Info Sci Electronics U   (Japan)

^c Info Secty Inst Queensland U   (Australia)

Author keywords

Authentication; Authorization; Business Process Model; PKI; PMI; Privacy; X.509 Certificates

Indexed keywords

COMPUTER SOFTWARE; DATA PRIVACY; INTERNET; MATHEMATICAL MODELS; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA;

AUTHENTICATION; AUTHORIZATION; BUSINESS PROCESS MODELS; PKI; PMI; PRIVACY; X.509 CERTIFICATES;

REQUIREMENTS ENGINEERING;

EID: 17744394269     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2005.01.005     Document Type: Article

References (17)

1. ISO/IEC, Information Technology-Code of Practice for Information Security Management ISO/IEC 17799, 2000.
2. L. Gordon, and M. Loeb 2004 CSI/FBI computer crime and security survey 2004 Computer Security Institute
3. D. Geer, M. Donner, M. Davidson, L. McGhie, and A. Shostack Patch management, can't live it, can't live without it Secure business quarterly 2003
4. G. Tassey The economic impacts of inadequate infrastructure for software testing 2002 National Institute of Standards and Technology
5. National Institute of Standards and Technology, "Common Criteria for Information and Technology Security Evaluation", U.S. Dept. of Commerce, National Bureau of Standards and Technology, August, 1999.
6. OMG Document, "MDA Guide V1.0.1, 2001".
7. BPMI Document, "BPML 1.0 Specification, 2003".
8. IBM Corporation, "Business Process Execution Language for Web Services Version 1.1".
9. WfMC, "Workflow Process Definition Interface-XML Process Definition Language (XPDL)", FMC-TC-1025,WfMC Standards, 2001.
10. G. de Giacomo, Y. Lésperance, and H. Levesque ConGolog, a concurrent programming language based on situation Calculus Artificial Intelligence 121 1-2 2000 109 169
11. W. van der Aalst The application of petri nets to workflow management Journal of Circuits, Systems and Computers 8 1 1998 21 66
12. H. Eriksson, and M. Penker Business modelling with UML: business patterns at work 2000 John Wiley and Sons
13. M. Siponen, and R. Baskerville A new paradigm for adding security into IS development methods Advances in information security management and small systems security 2001 Kluwer Academic Publishers
14. R. Housley, W. Ford, W. Polk, D. Solo, "Internet X.509 Public Key Infrastructure Certificate and CRL Profile", Request for Comments 2459, Network Working Group, Internet Engineering Task Force, January 1999.
15. ITU-T Recommendation X.509 Information Technology. Open systems interconnection The directory: public-key and attribute certificate frameworks 2000 (March)
16. J. Lopez, R. Oppliger, and G. Pernul Authentication and authorization infrastructures: a comparative survey Computers and Security vol. 23 (7) 2004 (October) Elsevier 578 590
17. V. Benjumea, J. Lopez, J.A. Montenegro, and J.M. Troya A first approach to provide anonymity in attribute certificates 2004 International Workshop on Practice and Theory in Public Key Cryptography (PKC'04) 2004 (March) Springer-Verlag