A design of usable and secure access-control APIs for mashup applications

Authors:
Ryota Hashimoto;Nachi Ueno;Michio Shimomura
Affiliations:
NTT Information Sharing Platform Laboratories, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Tokyo, Japan
Venue:
Proceedings of the 5th ACM workshop on Digital identity management
Year:
2009

Citing 7
Cited 1

Architectural styles and the design of network-based software architectures

Architectural styles and the design of network-based software architectures
Current Solutions for Web Service Composition

IEEE Internet Computing
Understanding SOA with Web Services (Independent Technology Guides)

Understanding SOA with Web Services (Independent Technology Guides)
Subspace: secure cross-domain communication for web mashups

Proceedings of the 16th international conference on World Wide Web
SMash: secure component model for cross-domain mashups on unmodified browsers

Proceedings of the 17th international conference on World Wide Web
A citizen privacy protection model for e-government mashup services

dg.o '08 Proceedings of the 2008 international conference on Digital government research
Hacking, Mashing, Gluing: Understanding Opportunistic Design

IEEE Pervasive Computing

Doctoral colloquium: integrating web content into mashups on desktop and mobile devices

GPC'11 Proceedings of the 6th international conference on Grid and Pervasive Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Mashups, which are applications that are developed rapidly by combining multiple Web applications, are currently gathering much attention. One issue arising when creating mashups using data that is subject to access control is the difficulty in adding authentication and access control functions without losing the advantage of rapid development. We discuss the design and prototype implementation of an access control platform called SAXAE. SAXAE supports more secure and easy development of mashups. Its API enables both more secure and easier to use data protected by access control protocols.