CredEx: User-centric credential management for grid and Web services

Proceedings - 2005 IEEE International Conference on Web Services, ICWS 2005

Volumn 2005, Issue , 2005, Pages 149-158

  Del Vecchio, David ^a   Humphrey, Marty ^a   Basney, Jim ^b   Nagaratnam, Nataraj ^c  

^a University of Virginia   (United States)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^c IBM   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; GRID SERVICES; SECURITY COMPONENTS; WEB SERVICES;

DISTRIBUTED COMPUTER SYSTEMS; INFORMATION SERVICES; OPEN SYSTEMS; SECURITY OF DATA; WORLD WIDE WEB;

INFORMATION MANAGEMENT;

EID: 33749053153     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2005.43     Document Type: Conference Paper

References (30)

1. About the Globus Toolkit. Accessed 29 April 2005. http://www-unix.globus. org/toolkit/about.html
2. S. Anderson, et al. Web Services Trust Language (WSTrust), v. 1.1. May 2004. ftp://www6.software.ibm.com/software/developer/library/ws-trust.pdf
3. Apache WSS4J. Apache Web Services Project, accessed 5 August 2004. http://ws.apache.org/ws-fx/wss4j
4. M. Ashant, J. Basney and O. Mulmo. Grid Delegation Protocol. UK Workshop on Grid Security Practice, Oxford, July 2004. http://www.ncsa.uiuc.edu/~jbasney/ Grid-Delegation-Protocol.pdf
5. Axis User's Guide, v1.l. Apache Software Foundation, 16 June 2003. http://ws.apache.org/axis/java/user-guide.html.
6. J. Basney, et al. An OGSI CredentialManager Service. UK Workshop on Grid Security Practice, Oxford, July 2004.
7. S. Carmody. Shibboleth Overview and Requirements. 20 February 2001. http://shibboleth.internet2.edu/docs/draftmternet2-shibboleth-requirements-01. html
8. Certificate Stores. MSDN Library, accessed 5 August 2004. http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ sag_cmuncertstor.mspx.
9. Entrust TruePass Product Portfolio: Technical Overview. July 2003. http://www.entrust.com/contact/download.cfm/entrust_truepass_tech_overview.pdf
10. S. Farrell, Ed. Securely Available Credentials Protocol (RFC 3767). IETF Network Working Group, June 2004. http://www.ietf.org/rfc/rfc3767.txt
11. M.J. Foley. Microsoft 'TrustBridge' Resurfaces. eWeek, Ziff Davis Media, 26 May 2004. http://www.eweek.com/article2/0,1759,1601790,00.asp
12. S. Godik and T. Moses, Eds. extensible Access Control Markup Language (XACML), 1.0. OASIS Standard, 18 February 2003. http://www.oasis-open.org/ committees/download.php/2406/oasis-xacml-1.0.pdf
13. M. Hondo and C. Kaier, Eds. Web Services Policy Framework. 28 May 2003. http://www-106.ibm.com/developerworks/library/ws-polfram
14. R. Housley, W. Ford, W. Polk and D. Solo. Internet X.509 PKI Certificate and CRL Profile (RFC 2459). IETF Network WG, 1999. http://www.ietf.org/rfc/ rfc2459.txt
15. J. Hughes and E. Maler. Technical Overview of the OASIS SAML v1.1. OASIS Security Services TC Draft, 11 May 2004. http://www.oasis-open.org/committees/ download.php/6837/sstc-saml-tech-overview-1.1-cd.pdf
16. C. Kaler and A. Nadalin, Eds. Web Services Federation Language (WS-Federation). 8 July 2003. http://www106.ibm.com/developerworks/webservices/ library/ws-fed.
17. J. Kemp, Ed. Liberty ID-WSF. May 2004. https://www.projectliberty.org/ resources/whitepapers/Liberty_ID-WSF_Web_Services_ Framework.pdf
18. keytool - Key and Certificate Management Tool. J2SE SDK Docs, accessed 5 August 2004. http://java.sun.com/j2se/1.4.2/docs/tooldocs/solaris/keytool.html.
19. Microsoft Expands Passport to Enable Universal Single Sign-In. Microsoft Press Release, 20 September 2001. Available at http://www.microsoft.com/ presspass/press/2001/sep01/09-20PassportFederationPR.asp
20. A. Nadalin, et al, Eds. Web Services Security 1.0 (WSSecurity). OASIS Standard 200401, March 2004. http://docs.oasis-open.org/wss/2004/01/oasis- 200401-wsssoap-message-security-1.0.pdf
21. B.C. Neuman and T. Ts'o. Kerberos: An Authentication Service for Computer Networks. IEEE Communications, 32 (9), September 1994, pp. 33-38.
22. J. Novotny, S. Tuecke and V. Welch. An Online Credential Repository for the Grid: MyProxy. Proceedings, HPDC-10, August 2001, pp. 104-111.
23. B. Schneier. Password Safe: The Security of Blowfish in a Password Database. Accessed 6 October 2004. http://www.schneier.com/passsafe.html
24. F. Siebenlist, et al. OGSA Security Roadmap: Towards a Secure OGSA. July 2002. http://www.globus.org/ogsa/security/draft-ggf-ogsa-sec-roadmap-01.doc
25. D.D. Skow. Fermilab Public-Key Infrastructure. 26 March 2004. http://computing.fnal.gov/security/pki.
26. S. Tuecke, et al. Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile (RFC 3820). IETF Network WG, June 2004. http://www.ietf.org/ rfc/rfc3820.txt.
27. T. Wason, Ed. Liberty ID-FF Architecture Overview. Version 1.2, 2003. http://www.projectliberty.org/specs/liberty-idff-arch-overview-v1.2.pdf
28. KX.509/KCA. http://www.nsf-middleware.org/documentation/NMI-R5/0/ gridscenter/KX509KCA/index.htm
29. G. Della-Libera et al. WS-Security Kerberos Binding. December 2003. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnglobspec/ html/wssecurity-kerberos.asp
30. P. Hallam-Baker et al. Eds. WS-Security: SAML Token Profile. Draft 15, 19 July 2004. http://www.oasis-open.org/committees/download.php/7837WSS-SAML-15. pdf