Unlocking repositories: federated security solution for attribute and policy based access to repositories via Web services

Author

Hatala, Marek ; Eap, Ty Mey ; Shah, Ashok

Author_Institution

Sch. of Interactive Arts & Technol., Simon Fraser Univ., Burnaby, BC, Canada

fYear

2006

fDate

20-22 April 2006

Abstract

In this paper we describe our novel solution for Web services enabling users from the trusted organizations to access learning objects in the repository based on their attributes in their home organizations. The solution extends a Web-based Shibboleth system into the realm of Web services. It utilizes the Web services security SAML profile and combines it with the XACML access control policies. The technical solution is described in the context of the course management systems with complex access policies in operation at our campus.

Keywords

Internet; authorisation; computer aided instruction; hypermedia markup languages; industrial property; open systems; Web services; Web-based Shibboleth system; XACML access control policies; course management systems; digital repository interoperability layer; federated security solution; intellectual property; security SAML profile; trusted organizations; Access control; Art; Business; Government; Licenses; Permission; Security; Software libraries; Standards development; Web services; attribute-based access control; federated security; repositories; trust; web services;

fLanguage

English

Publisher

ieee

Conference_Titel

Availability, Reliability and Security, 2006. ARES 2006. The First International Conference on

Print_ISBN

0-7695-2567-9

Type

conf

DOI

10.1109/ARES.2006.140

Filename

1625402