A scalable and flexible web services authentication model

SWS'07 - Proceedings of the 2007 ACM Workshop on Secure Web Services

Volumn , Issue , 2007, Pages 66-72

  Felix, Pedro ^a   Ribeiro, Carlos ^b  

^a INSTITUTO SUPERIOR DE ENGENHARIA DE LISBOA   (Portugal)

^b INESC ID   (Portugal)

Author keywords

authentication; trust management; web services security

Indexed keywords

AUTHENTICATION MODELS; COMMERCIAL GRADE; COMMUNICATION OVERHEADS; DECENTRALIZED SYSTEM; MESSAGE AUTHENTICATION; MODEL FIT; NEW MODEL; ONLINE INTERACTION; PERFORMANCE BOTTLENECKS; POLICY LANGUAGE; SECURITY MODEL; SECURITY TOKENS; TRUST MANAGEMENT; TRUST MANAGEMENT MODEL; WEB SERVICES PLATFORM; WEB SERVICES SECURITY;

AUTHENTICATION; SCALABILITY; SECURITY OF DATA;

WEB SERVICES;

EID: 58449114423     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314418.1314429     Document Type: Conference Paper

References (17)

1. M. Blaze, J. Feigenbaum, and A. D. Keromytis. The role of trust management in distributed systems security. In Secure Internet Programming: Security Issued for Mobile and Distributed Objects, pages 185-210. Springer-Verlag, 1999.
2. K. Cameron and M. Jones. Design Rationale behind the Identity Metasystem Architecture. Microsoft.
3. D. E. Clarke, J.-E. Elien, C. M. Ellison, M. Fredette, A. Morcos, and R. L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
4. A. Herzberg, Y. Mass, J. Mihaeli, D. Naor, and Y. Ravid. Access control meets public key infrastructure, or: assigning roles to strangers. In SP '00: Proceedings of the 2000 IEEE Symposium on Security and Privacy, pages 2-14, 14-17 May 2000.
5. M. Jones. A Guide to Supporting Information Cards within Web Applications and Browsers as of the Information Card Profile V1.0. Microsoft, December 2006.
6. N. Li, J. Feigenbaum, and B. Grosof. A logic-based knowledge representation for authorization with delegation. In CSFW '99: Proceedings of the 12th IEEE workshop on Computer Security Foundations, pages 162-174, 28-30 June 1999.
7. N. Li and J. Mitchell. RT: a role-based trust-management framework. In DARPA Information Survivability Conference and Exposition, 2003. Proceedings, volume 1, pages 201-212vol.1, 22-24 April 2003.
8. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, 2003.
9. Microsoft. Windows Communication Foundation. http://msdn2.microsoft.com/ enus/ netframework/aa663324.aspx.
10. OASIS. Web Services Security Kerberos Token Profile 1.1, February 2006.
11. OASIS. Web Services Security SAML Token Profile 1.1, February 2006.
12. OASIS. Web Services Security: SOAP Message Security 1.1, February 2006.
13. OASIS. Web Services Security UsernameToken Profile 1.1, February 2006.
14. OASIS. WS-Trust 1.3, March 2007.
15. H. Wang, S. Jha, T. Reps, S. Schwoon, and S. Stubblebine. Reducing the dependence of SPKI/SDSI on PKI. In D. Gollmann, J. Meier, and A. Sabelfeld, editors, Proceedings of the 11th European Symposium on Research in Computer Security (ESORICS), volume 4189 of Lecture Notes in Computer Science, pages 156-173, Hamburg, Germany, September 2006. Springer.
16. Word Wide Web Consortium. Web Services Addressing 1.0, August 2005.
17. Word Wide Web Consortium. Web Services Policy 1.5, June 2005.