Designing secure e-commerce with role-based access control

International Journal of Web Engineering and Technology

Volumn 3, Issue 1, 2007, Pages 73-95

  Cungang, Yang ^a  

^a RYERSON UNIVERSITY   (Canada)

Author keywords

Cookie; Digital credential; e commerce; Extensible Markup Language (XML); Object Oriented Role Based Access Control (ORBAC); Role based access control

Indexed keywords

ALGORITHMS; MATHEMATICAL MODELS; SECURITY OF DATA; XML;

DIGITAL CREDENTIAL; OBJECT-ORIENTED ROLE-BASED ACCESS CONTROL (ORBAC); ROLE-BASED ACCESS CONTROL;

ELECTRONIC COMMERCE;

EID: 33846483085     PISSN: 14761289     EISSN: 17419212     Source Type: Journal    
DOI: 10.1504/IJWET.2007.011528     Document Type: Article

References (17)

1. Barkley, J., Cincotta, A.V., Ferraiolo, D.F., Gavrila, S. and Kuhn, D.R. (1997) 'Role-based access control for the world wide web', 20th National Computer Security Conference, pp.331-340.
2. Blaze, M., Feigenbaum, J. and Keromytis, A.D. (1998a) 'Key No te: trust management for public-key infrastructures'. Security Protocols International Workshop, Springer LNCS, Vol. 1550, pp.59-63.
3. Blaze, M., Feignbaum, J. and Keromytis, A.D. (1998b) 'KeyNote: trust management of public-key infrastructures', Security Protocols, 6th International Workshop, Cambridge, UK, pp.59-63.
4. Blaze, M., Feignbaum, J. and Lacy, J. (1996) 'Decentralized trust management', IEEE Symposium on Security and Privacy, Oakland, CA, May, pp. 17-28.
5. Blaze, M., Feignbaum, J., Ioannidis, J. and Keromytis, A. (1999) 'The KeyNote trust management system, Version 2', Internet Draft RFC 2704, September.
6. Brands, S. (2002) A Technical Overview of Digital Credentials, February, http://citeseer.nj.nec.com/brands02technical.html.
7. Chadwick, D.W. (1996) 'The ICE-TEL public key infrastructure and trust model', DIMACS Workshop on Trust Management, New York, USA.
8. Chadwick, D.W. (2003) 'Deficiencies in LDAP when used to support a public key infrastructure', Communications of the ACM, March, Vol. 46, No. 3, pp.99-104.
9. Chu, Y.H., Feigenbaum, J., LaMacchia, B., Resnick, P. and Strauss, M. (1997) 'REFEREE: trust management for web applications', World Wide Web Journal, Vol. 2, pp. 127-139.
10. Ellison, C., Franz, B., Lampson, B., Rivest, R., Thomas, B. and Ylonen, T. (1999) Simple Public Key Certificate, Internet draft (expired), IETF SPKI Working Group, July.
11. Freier, A., Karlton, P. and Kocher, P. (1996) The SSL Protocol Version 3.0, Internet draft, March.
12. Garfinkel, S. (1995) PGP: Pretty Good Privacy, Sebastopol, CA: O'Reilly & Associates, Inc.
13. Giuri, L. (2001) 'Role-based access control on the web', ACM Transactions on Information and System Security, Vol. 4, No. 1, pp.37-71.
14. Housley, R., Ford, W., Polk, W. and Solo, D. (1999) Internet X.509 Public Key Infrastructure Certificate and CRL Profile, RFC 2459, Draft update draft-ietf-pkik-new-part1 -06.txt, January.
15. Kristol, D.M. and Montulli, L. (1999) HTTP State Managemnt Mechanism, Draft-ietf-http-state -man-mec.txt.
16. Moore, K. and Freed. N. (1999) Use of HTTP State Management, Draft-ietf-http-state-man -mec-12.txt.
17. NIST FTPS PUB 186 (1994) Digital Signature Standard, National Institute of Standards and Technology, US Department of Commerce, 18 May.