Publication

Abstract interdomain security assertions: A basis for extra-grid virtual organizations

Philippe Janson
2004
Journal paper
Abstract

One significant challenge in building grids between organizations with heterogeneous security systems is the need to express and enforce security policies that specify the users in one organization (the source domain) who are allowed to access the resources in another organization (the target domain). This requires linking the syntax and semantics of security assertions referring to users and their attributes in the source domain to those referring to resources in the target domain. This paper suggests some basic requirements for solving this problem, in particular, an abstract form of interdomain security assertion (IDSA) relying, for instance, on globally meaningful URIs (Uniform Resource Identifiers) to refer to users, resources, and their attributes. This canonical abstract form IDSA is, however, used strictly for assertion mapping purposes. It may - but need not - be visible in any concrete security assertion syntax in any domain. The paper further suggests different scenarios in which URIs for users, resources, and attributes defined in one domain can be mapped to semantically meaningful references - with varying degrees of granularity and accountability - in another domain where they would otherwise be meaningless. © 2004 IBM.

About this result
This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.
Related concepts (40)
Academic degree
An academic degree is a qualification awarded to a student upon successful completion of a course of study in higher education, usually at a college or university. These institutions often offer degrees at various levels, usually divided into undergraduate and postgraduate degrees. The most common undergraduate degree is the bachelor's degree, although some educational systems offer lower level undergraduate degrees such as associate and foundation degrees. Common postgraduate degrees include master's degrees and doctorates.
Domain name
In the Internet, a domain name is a string that identifies a realm of administrative autonomy, authority or control. Domain names are often used to identify services provided through the Internet, such as websites, email services and more. As of 2017, 330.6 million domain names had been registered. Domain names are used in various networking contexts and for application-specific naming and addressing purposes. In general, a domain name identifies a network domain or an Internet Protocol (IP) resource, such as a personal computer used to access the Internet, or a server computer.
Double degree
A double degree program, sometimes called a dual degree, combined degree, conjoint degree, joint degree or double graduation program, involves a student working for two university degrees —either at the same institution or at different institutions, sometimes in different countries. The two degrees might be in the same subject area, or in two different subjects. Undergraduate Brunei – Sultan Sharif Ali Islamic University Provide a double degree for Bachelor of Laws (LL.
Show more
Related publications (49)

Circularity by stock in Sri Lanka: Economic necessity meets urban fabric renovation

Paolo Tombesi, Milinda Pathiraja

Persistent fiscal and political mismanagement, together with the financial pressures of the COVID-19 pandemic, have driven Sri Lanka into a social and economic crisis triggering a decrease in national foreign exchange reserves, an inability to purchase vit ...
FRONTIERS MEDIA SA2023

Domain knowledge-informed synthetic fault sample generation with health data map for cross-domain planetary gearbox fault diagnosis

Olga Fink, Jongmoon Ha

Extensive research has been conducted on fault diagnosis of planetary gearboxes using vibration signals and deep learning (DL) approaches. However, DL-based methods are susceptible to the domain shift problem caused by varying operating conditions of the g ...
ACADEMIC PRESS LTD- ELSEVIER SCIENCE LTD2023

Experimental Investigation of Enhanced Grooves for Herringbone Grooved Journal Bearings

Jürg Alexander Schiffmann, Patrick Hubert Wagner, Philipp Kaspar Bättig

This paper presents the results of a theoretical and experimental investigation of the potential of enhanced groove geometries to increase the bearing clearance of a Herringbone Grooved Journal Bearing (HGJB) supported rotor. The theoretical study investig ...
2022
Show more

Graph Chatbot

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.