Skip to main content

Research Repository

Advanced Search

Privacy preserving trust authorization framework using XACML

Mbanaso, UM; Cooper, GS; Chadwick, DW; Proctor, S

Authors

UM Mbanaso

GS Cooper

DW Chadwick

S Proctor



Abstract

Nowadays many organizations share sensitive services
through open network systems and this raises the need
for an authorization framework that can interoperate
even when the parties have no pre-existing
relationships. Trust Negotiation is the process used to
establish these first relationships, through the transfer
of attributes, embedded in digital credentials, between
the two parties. However, these attributes may
themselves be considered sensitive and so may need
protection from disclosure. In some environments, the
policies that govern the protected services may also be
considered sensitive and their release to arbitrary
strangers may leak confidential business information.
This paper describes a way to unify the protection of
services, sensitive credentials and policies in a
synchronized trustworthy manner. We propose a trust
authorization framework (TAF) that builds on the
capabilities of XACML to support the bilateral
exchange of policies and credentials through trust
negotiation.

Citation

Mbanaso, U., Cooper, G., Chadwick, D., & Proctor, S. (2006, June). Privacy preserving trust authorization framework using XACML. Presented at WOWMOM 2006: Seventh IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks, Niagara Falls, New York, USA

Presentation Conference Type Other
Conference Name WOWMOM 2006: Seventh IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks
Conference Location Niagara Falls, New York, USA
Start Date Jun 26, 2006
End Date Jun 29, 2006
Deposit Date Apr 28, 2009
Publicly Available Date Apr 28, 2009
Publisher URL http://doi.ieeecomputersociety.org/10.1109/WOWMOM.2006.92
Related Public URLs http://www2.computer.org/portal/web/guest/home
Additional Information Additional Information : Published by IEEE (Institute of Electrical and Electronics Engineers) Computer Society
Event Type : Conference

Files





You might also like



Downloadable Citations