A delegation framework for federated identity management

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2005, Pages 94-103

  Gomi, Hidehito ^a   Hatakeyama, Makoto ^a   Hosono, Shigeru ^a   Fujita, Satoru ^a  

^a NEC CORPORATION   (Japan)

Author keywords

Access control; Delegation; Identity federation; Privilege; Role

Indexed keywords

AUTHENTICATION AUTHORITIES; BUSINESS PARTNERS; CONTROL ACCESS; DELEGATION; FEDERATED IDENTITY; IDENTITY FEDERATION; IDENTITY-BASED; PERSONALLY IDENTIFIABLE INFORMATION; SECURITY ASSERTION MARKUP LANGUAGES; SERVICE PROVIDER;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; KNOWLEDGE BASED SYSTEMS; MARKUP LANGUAGES; SECURITY SYSTEMS; WEB SERVICES;

AUTHENTICATION;

EID: 77953570949     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1102486.1102502     Document Type: Conference Paper

References (24)

1. M. Abadi, M. Burrows, B. Lampson, and G. Plotkin. "A Calculus for Access Control in Distributed Systems". ACM Transactions on Programming Languages and Systems, 15(4):706-734, 1993.
2. M. Ahsant, J. Basney, and O. Mulmo. "Grid Delegation Protocol". In Proceedings of the Workshop on Grid Security Practice and Experience, July 2004.
3. O. Bandmann, M. Dam, and B. Firozabadi. "Constrained Delegation". In Proceedings of the 2002 IEEE Symposium on Security and Privacy (S&P '02), pages 131-140, 2002.
4. BEA, IBM, Microsoft, RSA Security, and VeriSign. "Web Services Federation Language (WS-Federation)". Version 1.0, July 2003.
5. O. Canovas and A. Gomez. "Delegation in Distributed Systems: Challenges and Open Issues". In Proceedings of IEEE Internatinal Workshop on Database and Expert Systems Applications (DEXA '03), September 2003.
6. D. Chadwick and A. Otenko. "The PERMIS X.509 Role Based Privilege Management Infrastructure". In Proceedings of the seventh ACM Symposium on Access Control Models and Technologies (SACMAT '02), pages 135-140, 2002.
7. X. Feng, L. Guoyuan, H. Hao, and X. Li. "Role-Based Access Control System for Web Services". In Proceedings of the fourth International Conference on Computer and Information Technology (CIT '04), pages 357-362, 2004.
8. IBM, Microsoft, Actional, BEA, Computer Associates, Layer 7, Oblix, OpenNetwork, Ping Identity, Reactivity, and Verisign. "Web Services Trust Language (WS-Trust)", February 2005.
9. S. Na and S. Cheon. "Role Delegation in Role-Based Access Control". In Proceedings of the fifth ACM Workshop on Role-Based Access Control, pages 39-44, 2000.
10. G. Navarro, B. Fironzabadi, E. Rissanen, and J. Borrell. "Constrained Delegation in XML-based Access Control and Digital Rights Management Standards". In Proceedings of Communication, Network, and Information Security (CNIS '03), 2003.
11. OASIS. "Web Services Security: SOAP Message Security 1.0". OASIS Standard, March 2004.
12. OASIS. "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0". OASIS Standard, March 2005.
13. OECD. "OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data", 2004. http://www.oecd.org/document/18/0, 2340, en-2649-201185-1815186-1-1-1-1, 00.html.
14. OPA. "Guidelines for Online Privacy Policies". http://www.privacyalliance.org/resources/ppguidelines.shtml.
15. Liberty Alliance Project. "Liberty ID-FF Protocols and Schema Specification". Version 1.2, November 2003. http://www.projectliberty.org/ specs.
16. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. "Role-Based Access Control Models". IEEE Computer, 29(2):38-47, February 1996.
17. D. Shin, G. Ahn, and P. Shenoy. "Ensuring Information Assurance in Federated Identity Management". In Proceedings of IEEE Internatinal Performance Computing and Communications Conference (IPCCC '04), April 2004.
18. The Globus Security Team. "Globus Toolkit Version 4 Grid Security Infrastructure: A Standards Perspective". Version 2, December 2004.
19. W3C. "Web Services Description Language (WSDL) 1.1". W3C Note, March 2001. http://www.w3.org/TR/wsdl.
20. W3C. "The Platform for Privacy Preferences 1.0 (P3P1.0) Specification". W3C Recommendation, April 2002. http://www.w3.org/TR/P3P/.
21. W3C. "SOAP Version 1.2 Part 0: Primer". W3C Recommendation, June 2003. http://www.w3.org/TR/soap12-part0/.
22. J. Wang, D. Vecchio, and M. Humphrey. "Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services". IEEE International Conference on Web Services (ICWS '05), July 2005.
23. V. Welch, I. Faster, C. Kesselman, O. Mulmo, L. Pearlman, S. Tuecke, J. Gawor, S. Meder, and F. Siebenlist. "X.509 Proxy Certificates for Dynamic Delegation". 3rd Annual PKI R&D Workshop, 2004.
24. L. Zhang, G. Ahn, and B. Chu. "A Rule-Based Framework for Role-Based Delegation". In Proceedings of the sixth ACM Symposium on Access Control Models and Technologies, pages 153-162, May 2001.