首页> 外文会议>E-Commerce and Web Technologies; Lecture Notes in Computer Science; 4082 >Attribute-Based Authentication and Authorisation Infrastructures for E-Commerce Providers
【24h】

Attribute-Based Authentication and Authorisation Infrastructures for E-Commerce Providers

机译:电子商务提供商的基于属性的身份验证和授权基础结构

获取原文
获取原文并翻译 | 示例

摘要

Authentication and authorisation has been a basic and necessary service for internet transactions. With the evolution of e-commerce, traditional mechanisms for data security and access control are becoming outdated. Several new standards have emerged which allow dynamic access control based on exchanging user attributes. Unfortunately, while providing highly secure and flexible access mechanisms is a very demanding task, it cannot be considered a core competency for most e-commerce corporations. Therefore, a need to outsource or at least share such services with other entities arises. Authentication and Authorisation Infrastructures (AAIs) can provide such integrated federations of security services. They could, in particular, provide attribute-based access control (ABAC) mechanisms and mediate customers' demand for privacy and vendors' needs for information. We propose an AAI reference model that includes ABAC functionality based on the XACML standard and lessons learned from various existing AAIs. AAIs analysed are AKENTI, CARDEA, CAS, GridShib, Liberty ID-FF, Microsoft .NET Passport, PAPI, PERMIS, Shibboleth and VOMS.
机译:身份验证和授权已成为Internet交易的基本和必要服务。随着电子商务的发展,用于数据安全和访问控制的传统机制已经过时。已经出现了几种新标准,它们允许基于交换用户属性的动态访问控制。不幸的是,尽管提供高度安全和灵活的访问机制是一项非常艰巨的任务,但对于大多数电子商务公司而言,它不能被视为一项核心能力。因此,出现了将这些服务外包或至少与其他实体共享的需求。身份验证和授权基础结构(AAI)可以提供这种集成的安全服务联合。他们尤其可以提供基于属性的访问控制(ABAC)机制,并调解客户对隐私的需求和供应商对信息的需求。我们提出了一个AAI参考模型,其中包括基于XACML标准的ABAC功能以及从各种现有AAI中汲取的经验教训。分析的AAI是AKENTI,CARDEA,CAS,GridShib,Liberty ID-FF,Microsoft .NET Passport,PAPI,PERMIS,Shibboleth和VOMS。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号