UM Mbanaso
Privacy preserving trust authorization framework using XACML
Mbanaso, UM; Cooper, GS; Chadwick, DW; Proctor, S
Authors
GS Cooper
DW Chadwick
S Proctor
Abstract
Nowadays many organizations share sensitive services
through open network systems and this raises the need
for an authorization framework that can interoperate
even when the parties have no pre-existing
relationships. Trust Negotiation is the process used to
establish these first relationships, through the transfer
of attributes, embedded in digital credentials, between
the two parties. However, these attributes may
themselves be considered sensitive and so may need
protection from disclosure. In some environments, the
policies that govern the protected services may also be
considered sensitive and their release to arbitrary
strangers may leak confidential business information.
This paper describes a way to unify the protection of
services, sensitive credentials and policies in a
synchronized trustworthy manner. We propose a trust
authorization framework (TAF) that builds on the
capabilities of XACML to support the bilateral
exchange of policies and credentials through trust
negotiation.
Citation
Mbanaso, U., Cooper, G., Chadwick, D., & Proctor, S. (2006, June). Privacy preserving trust authorization framework using XACML. Presented at WOWMOM 2006: Seventh IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks, Niagara Falls, New York, USA
Presentation Conference Type | Other |
---|---|
Conference Name | WOWMOM 2006: Seventh IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks |
Conference Location | Niagara Falls, New York, USA |
Start Date | Jun 26, 2006 |
End Date | Jun 29, 2006 |
Deposit Date | Apr 28, 2009 |
Publicly Available Date | Apr 28, 2009 |
Publisher URL | http://doi.ieeecomputersociety.org/10.1109/WOWMOM.2006.92 |
Related Public URLs | http://www2.computer.org/portal/web/guest/home |
Additional Information | Additional Information : Published by IEEE (Institute of Electrical and Electronics Engineers) Computer Society Event Type : Conference |
Files
25930673.pdf
(244 Kb)
PDF
Version
Publisher version