Development of a flexible PERMIS authorisation module for shibboleth and apache server

Authors:
Wensheng Xu;David W. Chadwick;Sassa Otenko
Affiliations:
Computing Laboratory, University of Kent, Canterbury, England;Computing Laboratory, University of Kent, Canterbury, England;Computing Laboratory, University of Kent, Canterbury, England
Venue:
EuroPKI'05 Proceedings of the Second European conference on Public Key Infrastructure
Year:
2005

Citing 6
Cited 3

A role-based access control model and reference implementation within a corporate intranet

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
RBAC on the Web by smart certificates

RBAC '99 Proceedings of the fourth ACM workshop on Role-based access control
The NIST model for role-based access control: towards a unified standard

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Role-based access control on the web

ACM Transactions on Information and System Security (TISSEC)
RBAC Policies in XML for X.509 Based Privilege Management

SEC '02 Proceedings of the IFIP TC11 17th International Conference on Information Security: Visions and Perspectives
Role-Based Access Control With X.509 Attribute Certificates

IEEE Internet Computing

Public Key Infrastructures: A research agenda

Journal of Computer Security - On IWAP'05
Shibboleth-based Access to and Usage of Grid Resources

GRID '06 Proceedings of the 7th IEEE/ACM International Conference on Grid Computing
Authentication and authorization infrastructure for Grids--issues, technologies, trends and experiences

The Journal of Supercomputing

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes the development of a flexible Role Based Access Control (RBAC) authorisation module – the Shibboleth and Apache Authorisation Module (SAAM) which is based on the PERMIS privilege management infrastructure. It explains how the module can work with the Apache web server, with or without Shibboleth. We argue that this can effectively improve the level of trust and flexibility of access control for the Shibboleth architecture and the Apache web server, as well as provide a finer grained level of control over web resources.