An integrated approach to federated identity and privilege management in open systems

Communications of the ACM

Volumn 50, Issue 2, 2007, Pages 81-87

  Bhatti, Rafae ^a   Bertino, Elisa ^b,c   Ghafoor, Arif ^d  

^a IBM ALMADEN RESEARCH CENTER   (United States)

^b Department of Computational Science ^*  (United States)

^c PURDUE UNIVERSITY   (United States)

^d Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHORIZATION MODELS; AUTHORIZATION PROTOCOLS; WEB BASED APPLICATIONS;

COMPUTER SUPPORTED COOPERATIVE WORK; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; NETWORK PROTOCOLS; ONLINE SYSTEMS; WORLD WIDE WEB;

OPEN SYSTEMS;

EID: 33846685793     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1216016.1216025     Document Type: Article

References (12)

1. Bacon, J., Moody, K., and Yao, W. Access control and trust in the use of widely distributed services. In Middleware 2001, Vol. 2218 of Lecture Notes in Computer Science. Springer-Verlag, New York, 2001, 300-315.
2. Bhatti, R., Bertino, K., and Ghafoor, A. X-FEDERATE: A policy engineering framework for federated access management. IEEE Transactions on Software 32, 5 (May 2006), 330-346.
3. Bhatti, R., Joshi, J., Bertino, E., and Ghafoor, A. X-GTRBAC: An XML-based policy specification framework and architecture for enterprisewide access control. ACM Transactions on Information and System Security 8, 2 (May 2005), 187-227.
4. Blaze, M., Feigenbaum, J., and Keromytis, A. KeyNote: Trust management for public-key infrastructures. In Proceedings of the Sixth International Workshop on Security Protocols (Cambridge, U.K., Apr. 15-17). Springer, New York, 1998, 59-63.
5. Buell, D. and Sandhu, R. Identity management (guest editors' introduction). IEEE Internet Computing 7, 6 (Nov.-Dec. 2003), 26-28.
6. Chadwick, D., Otenko, S., and Welch, V. Using SAML to link the Globus Toolkit to the PERMIS authorization infrastructure. In Proceedings of the Eighth Annual IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (Windermere, U.K., Sept. 15-18). Springer, New York, 2004, 251-262.
7. Chadwick, D. and Otenko, A. The PERMIS X.509 role-based privilege-management infrastructure. In Proceedings of the Seventh ACM Symposium on Access Control Models and Technologies (Monterey, CA, June 3-4). ACM Press, New York, 2002, 135-140.
8. Ellison, C. SPKI Requirements, RFC 2692, Internet Engineering Task Force Draft, Sept. 1999; www.ietf.org/rfc/rfc2692.txt.
9. Herzberg, A., Mass, Y., Mihaeli, J., Naor, D., and Ravid, Y. Access control meets public key infrastructure: Assigning roles to strangers. In Proceedings of the 2000 IEEE Symposium on Security and Privacy (Oakland, CA, May 14-17). IEEE Press, Piscataway, NJ, 2000, 2-14.
10. Kormann, D. and Rubin, A. Risks of the Passport Single Sign-on Protocol. Computer Networks 33, 6 (June 2000), 51-58.
11. Li, N., Mitchell, J., and Winsborough, W. Design of a role-based trust-management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy (Oakland, CA, May 12-15). IEEE Computer Society Press, Piscataway, NJ, 2002, 114-130.
12. Needham, R. and Schroeder, M. Using encryption for authentication in large networks of computers. Commun. ACM 21, 12 (Dec. 1978), 993-999.