Skip to Main Content (Press Enter)

Logo UNIBG
  • ×
  • Home
  • Corsi
  • Insegnamenti
  • Persone
  • Pubblicazioni
  • Strutture
  • Attività
  • Competenze

UNI-FIND
Logo UNIBG

|

UNI-FIND

unibg.it
  • ×
  • Home
  • Corsi
  • Insegnamenti
  • Persone
  • Pubblicazioni
  • Strutture
  • Attività
  • Competenze
  1. Pubblicazioni

Expressive and deployable access control in Open Web Service Applications

Articolo
Data di Pubblicazione:
2011
Abstract:
Traditional access control solutions, based on preliminary identification and authentication of the access requester, are not adequate for the context of open Web service systems, where servers generally do not have prior knowledge of the requesters. The research community has acknowledged such a paradigm shift and several investigations have been carried out for new approaches to regulate access control in open dynamic settings. Typically based on logic, such approaches, while appealing for their expressiveness, result not applicable in practice, where simplicity, efficiency, and consistency with consolidated technology are crucial. The eXtensible Access Control Markup Language (XACML) has established itself as the emerging technological solution for controlling access in an interoperable and flexible way. Although supporting the most common policy representation mechanisms and having acquired a significant spread in the research community and the industry, XACML still suffers from some limitations which impact its ability to support actual requirements of open Web-based systems. In this paper, we provide a simple and effective formalization of novel concepts that have to be supported for enforcing the new access control paradigm needed in open scenarios, toward the aim of providing an expressive solution actually deployable with today’s technology. We illustrate how the concepts of our model can be deployed in the XACML standard by exploiting its extension points for the definition of new functions, and introducing a dialog management framework to enable access control interactions between Web service clients and servers.
Tipologia CRIS:
1.1.01 Articoli/Saggi in rivista - Journal Articles/Essays
Elenco autori:
Ardagna, CLAUDIO AGOSTINO; DE CAPITANI DI VIMERCATI, Sabrina; Paraboschi, Stefano; Pedrini, Eros; Samarati, Pierangela; Verdicchio, Mario
Autori di Ateneo:
PARABOSCHI Stefano Giulio
VERDICCHIO Mario
Link alla scheda completa:
https://aisberg.unibg.it/handle/10446/26067
Pubblicato in:
IEEE TRANSACTIONS ON SERVICES COMPUTING
Journal
  • Dati Generali
  • Ricerca

Dati Generali

URL

http://ieeexplore.ieee.org/xpl/RecentIssue.jsp?punumber=4629386

Ricerca

Settori


Settore ING-INF/05 - Sistemi di Elaborazione delle Informazioni
  • Utilizzo dei cookie

Realizzato con VIVO | Designed by Cineca | 25.6.1.0