Adding support to XACML for dynamic delegation of authority in multiple domains

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4237 LNCS, Issue , 2006, Pages 67-86

  Chadwick, David W ^a   Otenko, Sassa ^a   Nguyen, Tuan Anh ^a  

^a UNIVERSITY OF KENT   (United Kingdom)

Author keywords

Credentials, attributes; Delegation of authority; PDP; Policies; XACML

Indexed keywords

COMPUTER SYSTEMS; DATA PROCESSING; DECISION MAKING; MATHEMATICAL MODELS; PUBLIC POLICY; SPECIFICATIONS;

CREDENTIALS, ATTRIBUTES; DELEGATION OF AUTHORITY; PDP; XACML; ATTRIBUTES; CREDENTIALS;

SECURITY OF DATA; DATA FLOW ANALYSIS;

EID: 33845225891     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11909033_7     Document Type: Conference Paper

References (20)

1. See http://dictionary.reference.com/search?=delegate
2. OASIS. "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0", 15 January 2005
3. ISO 9594-8/ITU-T Rec. X.509 (2001) The Directory: Public-key and attribute certificate frameworks
4. Scot Cantor. "Shibboleth Architecture, Protocols and Profiles, Working Draft 02, 22 September 2004, see http://shibboleth.internet2.edu/
5. David F. Ferraiolo, Ravi Sandhu, Serban Gavrila, D. Richard Kuhn And Ramaswamy Chandramouli. "Proposed NIST Standard for Role-Based Access Control". ACM Transactions on Information and System Security, Vol. 4, No. 3, August 2001, Pages 224-274
6. Internet2 Middleware Architecture Committee for Education, Directory Working Group (MACE-Dir) "EduPerson Specification (200312)", December 2003. Available from http://www.nmi-edit.org/eduPerson/internet2-mace-dir- eduperson-200312.html
7. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Ylonen. "SPKI Certificate Theory". RFC 2693, Sept 1999.
8. "OASIS eXtensible Access Control Markup Language (XACML)" v2.0, 6 Dec 2004, available from http://www.oasis-open.org/committees/tc_home.php? wg_abbrev=xacml
9. O. Bandmann, M. Dam, and B. Sadighi Firozabadi."Constrained delegation". In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages131-140, Oakland, CA, May 2002. IEEE Computer Society Press.
10. Paul Madsen. "WS-Trust: Interoperable Security for Web Services". June 2003. Available from http://webservices.xml.eom/pub/a/ws/ 2003/06/24/ws-trust.html
11. Markus Lorch, Seth Proctor, Rebekah Lepro, Dennis Kafura, Sumit Shah. "First experiences using XACML for access control in distributed systems". Proceedings of the 2003 ACM workshop on XML security, October 31-31, 2003, Fairfax, Virginia
12. Wolfgang Hommel. "Using XACML for Privacy Control in SAML-based Identity Federations". In 9th IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2005), Springer, Salzburg, Austria, September 2005
13. Alfieri R, et al. VOMS: an authorization system for virtual organizations, 1st European across grids conference, Santiago de Compostela. 13-14 February 2003. Available from: http://grid-auth.infn.it/docs/VOMS- Santiago.pdf
14. Tom Barton, Jim Basney, Tim Freeman, Tom Scavo, Frank Siebenlist, Von Welch, Rachana Ananthakrishnan, Bill Baker, Kate Keahey. "Identity Federation and Attribute-based Authorization through the Globus Toolkit, Shibboleth, GridShib, and MyProxy". To be presented at NIST PKI Workshop, April 2006.
15. Dwaine Clarke, Jean-Emile Elien, Carl Ellison, Matt Fredette, Alexander Morcos, Ronald L. Rivest. "Certificate chain discovery in SPKI/SDSI". Journal of Computer Security, Issue: Volume 9, Number 4 / 2001, Pages: 285-322
16. Y. Elley, A. Anderson, S. Hanna, S. Mullan, R. Perlman and S. Proctor, "Building certificate paths: Forward vs. reverse". Proceedings of the 2001 Network and Distributed System Security Symposium (NDSS'01), Internet Society, February 2001, pp. 153-160.
17. Ninghui Li, William H. Winsborough, John C. Mitchell. "Distributed credential chain discovery in trust management".Joumal of Computer Security 11 (2003) pp 35-86
18. XACML v3.0 administration policy Working Draft 05 December 2005. http://www.oasisopen.org/committees/documents.php?wg abbrev=xacml.
19. Housley, R., Ford, W., Polk, W., and Solo, D., "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile," RFC 3280, April 2000
20. David Chadwick. "Authorisation using Attributes from Multiple Authorities" in Proceedings of WET-ICE 2006, June 2006, Manchester, UK