Using XACML for privacy control in SAML-based identity federations

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3677 LNCS, Issue , 2005, Pages 160-169

  Hommel, Wolfgang ^a  

^a Leibniz Computing Center   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ATTRIBUTE RELEASE POLICIES (ARPS); EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGE (XACML); IDENTITY PROVIDERS; POLICY EVALUATION; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; FEDERATED IDENTITY MANAGEMENTS; IDENTITY FEDERATION; PRIVACY CONTROL; SERVICE PROVIDER; WORK-FLOWS;

COMPUTER PROGRAMMING LANGUAGES; INFORMATION SERVICES; PUBLIC POLICY; SECURITY OF DATA; MARKUP LANGUAGES;

DATA PRIVACY; ACCESS CONTROL;

EID: 33646151405     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11552055_16     Document Type: Conference Paper

References (16)

1. Cantor, S., Kemp, J., Philpott, R., Maler, E.: Security Assertion Markup Language v2.0. OASIS Security Services Technical Committee Standard (2005)
2. Varney, C.: Liberty Alliance - Privacy and Security Best Practices 2.0. http: //project-liberty.org/specs/ (2003)
3. Kaler, C., Nadalin, A.: Web Services Federation Language (WS-Federation), http://www-106.ibm.com/developerworks/webservices/library/ws-fed/ (2003)
4. Erdos, M., Cantor, S.: Shibboleth architecture (v05). http://shibboleth.internet2. edu/docs/ (2002)
5. Moses, T.: OASIS eXtensible Access Control Markup Language 2.0, core specification. OASIS XACML Technical Committee Standard (2005)
6. Reagle, J., Cranor, L.F.: The Platform for Privacy Preferences. In: Communications of the ACM. Volume 42., ACM Press (1999) 48-55
7. Langheinrich, M.: A P3P Preference Exchange Language - APPEL 1.0. http://www.w3.org/TR/P3P-preferences/ (2002)
8. Nazareth, S., Smith, S.: Using SPKI/SDSI for Distributed Maintenance of Attribute Release Policies in Shibboleth. Technical Report TR2004-485, Department of Computer Science, Dartmouth College, Hanover, HN 03744 USA (2004)
9. Ellison, C., Frantz, B., Lampson, B., Rivest, R., Thomas, B., Ylnen, T.: SPKI Certificate Theory. IETF Proposed Standard, RFC 2693 (1999)
10. Rivest, R., Lampson, B.: SDSI - A Simple Distributed Security Infrastructure. Presented at CRYPTO'96 Rumpsession (1996)
11. Lepro, R.: Cardea: Dynamic Access Control in Distributed Systems. Technical Report TR NAS-03-020, NASA Advanced Supercomputing Division, Ames (2003)
12. Mazzuca, P.: Access Control in a Distributed Decentralized Network: An XML Approach to Network Security. Honors Thesis, Dartmouth College (2004)
13. Chadwick, D., Otenko, A.: The PERMIS X.509 Role Based Privilege Management Infrastructure. In: Proceedings of the 7th ACM Symposium on Access Control Models and Technologies. SACMAT, ACM Press (2002) 135-140
14. Anderson, A.H.: The Relationship Between XACML and P3P Privacy Policies. http://research.sun.com/projects/xacml/ (2004)
15. Proctor, S.: Sun's XACML implementation, http://sunxacml.sf.net/ (2004)
16. Anderson, A.: XML Digital Signature profile of XACML 2.0. OASIS TC Committee draft, 16. September 2004 (2004)