Research on multi-level security framework for OpenID

3rd International Symposium on Electronic Commerce and Security, ISECS 2010

Volumn , Issue , 2010, Pages 393-397

  Wei, Junyin ^a   Zhang, Mingxi ^a   Ding, Xiangwu ^a   Wang, Ying ^b  

^a DONGHUA UNIVERSITY   (China)

^b SHANDONG INSTITUTE OF BUSINESS AND TECHNOLOGY   (China)

Author keywords

Confidentiality; Identity management; Integrity; Multi level security; OpenID; Single Sign On

Indexed keywords

CONFIDENTIALITY; IDENTITY MANAGEMENT; INTEGRITY; MULTI-LEVEL SECURITY; OPENID; SINGLE SIGN ON;

ELECTRONIC COMMERCE;

ACCESS CONTROL;

EID: 77957570415     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISECS.2010.95     Document Type: Conference Paper

References (16)

1. A. Volchkov. Revisiting Single Sign-on: A Pragmatic Approach in a New Context [J]. IT Professional, IEEE, 2001, pp. 39-45.
2. M. Erdos, M. SCantor. Shibboleth Architecture Technical Overview Working Draft 02 [Z]. Shibboleth Project, 2005.
3. J. C. La. Shibboleth 2 implemented protocols and profiles [Z]. Shibboleth Project, 2009.
4. Microsoft. .Net Passport Review Guide [Z]. 2008.
5. Liberty Alliance. Liberty ID-FF Architecture Overview v1.2 [Z]. Liberty Alliance Project, 2006.
6. A. Josang, S. Pope. User Centric Identity Management [R]. AusCERT Conference 2005, CRC for Enterprise Distributed Systems Technology (DSTC Pty Ltd), The University of Queensland, Australia, 2005.
7. J. R. Suler. Identity Management in Cyberspace [J]. Journal of Applied Psychoanalytic Studies, 2004, 4(4), pp. 455-459.
8. J. R. Suler. Identity management and its support of multilateral security [J]. Computer Network, 2001, 37(2), pp. 205-219.
9. D. E. Bell, L. J. La Padula. Secure computer systems: Mathematical foundations [R]. The MITRE Corporation, Bedford, Massachussatts: Technical Report M74-244, 1973.
10. D. E. Bell, L. J. LaPadula. Secure computer systems: A mathematical model [R]. The MITRE Corporation, Bedford, Massachussatts: Technical Report M74-244, 1973.
11. D. E. Bell, L. J. LaPadula. Secure computer systems: :Unified exposition and multics interpretation [R]. The MITRE Corporation, Bedford, Massachussatts: Technical Report MTR-2997, 1975.
12. Bishop, M. Computer Security: Art and Science, Addison Wesley, Boston, MA. 2003.
13. K. J. Biba. Integrity considerations for secure computer systems [R]. USAF Electronic System Division, Hanscom Air Force Base, Tech. Rep.: ESD-TR-76-372, 1977.
14. Xiangfeng Zhang, Yufang Sun. Dynamic Enforcement of the Strict Integrity Policy in Biba's Model. Journal of Computer Research and Development. 2005, 42(5), pp. 746-754. (Pubitemid 40777147)
15. Mingxi Zhang. Strict Integrity Policy of Biba Model with Dynamic Characteristics and Its Correctness [C]. CIS2009, IEEE Computer Society Press, pp. 521-525.
16. Junyin Wei, Mingxi Zhang, Hui Liu. Research on Dynamic Determination Scheme for Subject's Integrity Level of OpenID [C]. ISISE2009, IEEE Computer Society Press, 2009, pp. 13-18.