Privacy enabled web service access control using SAML and XACML for home automation gateways

2011 International Conference for Internet Technology and Secured Transactions, ICITST 2011

Volumn , Issue , 2011, Pages 584-591

  Jung, Markus ^a   Kienesberger, Georg ^a   Granzer, Wolfgang ^a   Unger, Martin ^a   Kastner, Wolfgang ^a  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

access control; Home automation; Web services

Indexed keywords

CONTROL CONCEPT; EASE OF USE; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; HOME AUTOMATION; HOME AUTOMATION SYSTEMS; RECENT TRENDS; SECURITY AND PRIVACY; SECURITY ASSERTION MARKUP LANGUAGES; SERVICE ACCESS; SERVICE PROVIDER; SERVICE-BASED; SMART HOMES; THIRD PARTIES;

ACCESS CONTROL; AUTOMATION; GATEWAYS (COMPUTER NETWORKS); INTELLIGENT BUILDINGS; INTERNET; WEB SERVICES;

APPLICATION PROGRAMMING INTERFACES (API);

EID: 84857491494     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. W. Kastner, G. Neugschwandtner, S. Soucek, and H. Newmann, "Communication systems for building automation and control," Proceedings of the IEEE, vol. 93, no. 6, pp. 1178-1203, 2005. (Pubitemid 40928635)
2. W. Granzer, W. Kastner, and C. Reinisch, "Gateway-free Integration of BACnet and KNX using Multi-Protocol Devices," in Proc. 6th IEEE International Conference on Industrial Informatics (INDIN '08), 2008, pp. 973-978.
3. K. Wacks, "Utility load management using home automation," Consumer Electronics, IEEE Transactions on, vol. 37, no. 2, pp. 168-174, 1991. (Pubitemid 21662044)
4. T. Moses et al., "Extensible access control markup language (XACML) version 2.0," Oasis Standard, vol. 200502, 2005.
5. S. Cantor, J. Kemp, R. Philpott, and E. Maler, "Assertions and protocols for the oasis security assertion markup language (SAML) v2. 0. oasis standard saml-core-2.0-os," 2005.
6. D. Box, D. Ehnebuske, G. Kakivaya, A. Layman, N. Mendelsohn, H. Nielsen, S. Thatte, and D. Winer, "Simple object access protocol (SOAP) 1.1, 2000," W3C Note.
7. E. Christensen, F. Curbera, G. Meredith, S. Weerawarana et al., "Web services description language (WSDL) 1.1," 2001.
8. C. Pautasso, O. Zimmermann, and F. Leymann, "Restful web services vs. "big"' web services: making the right architectural decision," in Proceeding of the 17th international conference on World Wide Web, ser. WWW '08. New York, NY, USA: ACM, 2008, pp. 805-814. [Online]. Available: http://doi.acm.org/10.1145/1367497.1367606
9. G. Dickmann, "Digitalstrom: A centralized PLC topology for home automation and energy management," in Power Line Communications and Its Applications (ISPLC), 2011 IEEE International Symposium on, 2011, pp. 352-357.
10. D. J. Solove, "A taxonomy of privacy," University of Pennsylvania Law Review, Vol. 154, No. 3, p. 477, 2006.
11. J. Hughes and E. Maler, "Security assertion markup language (SAML) v2. 0 technical overview," OASIS SSTC Working Draft sstc-saml-techoverview- 2.0-draft-08, 2005.
12. E. Damiani, S. di Vimercati, S. Paraboschi, and P. Samarati, "Fine grained access control for SOAP e-services," in Proceedings of the 10th international conference on World Wide Web. ACM, 2001, pp. 504-513.
13. H. Yin, J. Zhou, H. Wu, and L. Yu, "A SAML/XACML based access control between portal and web services," in Data, Privacy, and E-Commerce, 2007. ISDPE 2007. The First International Symposium on. IEEE, 2007, pp. 356-360.
14. M. Sharifi, H. Movahednejad, S. G. H. Tabatabei, and S. Ibrahim, "An effective access control approach to support web service security,"in Proceedings of the 11th International Conference on Information Integration and Web-based Applications & Services, 2009, pp. 529-535.
15. C. Shang, Z. Yang, Q. Liu, and C. Zhao, "A context based dynamic access control model for Web service," in Embedded and Ubiquitous Computing, 2008. EUC'08. IEEE/IFIP International Conference on, vol. 2. IEEE, 2008, pp. 339-343.
16. H. Tao, "A XACML-based access control model for web service," in Wireless Communications, Networking and Mobile Computing, 2005. Proceedings. 2005 International Conference on, vol. 2. IEEE, 2005, pp. 1140-1144.
17. E. Hammer-Lahav, D. Recordon, and D. Hardt, "The OAuth 2.0 authorization protocol," IETF Draft. February, 2011.
18. A. Anderson and H. Lockhart, "SAML 2.0 profile of XACML," OASIS Committee Draft, vol. 2, no. 11, 2004.
19. M. Bartel, J. Boyer, B. Fox, B. LaMacchia, and E. Simon, "XML-signature syntax and processing," W3C recommendation, vol. 12, p. 2002, 2002.
20. E. Maler, C. Cahill, A. Hughes, A. Origin, M. Beach, B. Metz, B. Hamilton, R. Randall, T. Wisniewski, E. Reid et al., "Security and privacy considerations for the oasis security assertion markup language (saml) v2. 0," Language (SAML), vol. 2, 2005.
21. G. Kienesberger, M. Meisel, and A. Adegbite, "A comprehensive information platform for the smart grid," in Proceedings of IEEE AFRICON 2011, to appear.