Authorisation Using Attributes from Multiple Authorities

Authors:
David W. Chadwick
Affiliations:
University of Kent, UK
Venue:
WETICE '06 Proceedings of the 15th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises
Year:
2006

Citing 0
Cited 2

Adding support to XACML for dynamic delegation of authority in multiple domains

CMS'06 Proceedings of the 10th IFIP TC-6 TC-11 international conference on Communications and Multimedia Security
Reachability analysis for role-based administration of attributes

Proceedings of the 2013 ACM workshop on Digital identity management

Quantified Score

Hi-index	0.00

Visualization

Abstract

As attribute based authorisation infrastructures such as XACML gain in popularity, linking together user attributes from multiple attribute authorities (AAs) is becoming a pressing problem. Current models and mechanisms do not support this linking, primarily because the user is known by different names in the different AAs. Furthermore, linking the attributes together poses a potential risk to the user's privacy. This paper provides a model and protocol elements for linking AAs, service providers and user attributes together, under the sole control of the user, thereby maintaining the user's privacy. The paper also shows how the model and protocol elements can be implemented using existing technologies, namely relational databases or LDAP directories, and the SAML protocol.