Authentication and Authorization of Users and Services in Dynamic Military SOA Environments
DOI:
https://doi.org/10.26636/jtit.2011.1.1134Keywords:
authentication, authorization, military networks, SOA, web servicesAbstract
The problem of user authentication and authorization is usually being solved in a single system. Federated environment assumes heterogeneity of systems, which brings the problem of mutual users and services authentication and authorization. In this article the authors presented security requirements for cross domain information exchange in federated environments and a method of secure access to information resources on the basis of web services. Special attention was paid to authentication and authorization of users and services. As opportunities, there were presented solutions verified in multinational experimentations and exercises.
Downloads
References
[1] NATO Network Enabled Feasibility Study Volume II: Detailed Report Covering a Strategy and Roadmap for Realizing an NNEC Networking and Information Infrastructure (NII), version 2.0.
View in Google Scholar
[2] „Guide to Secure Web Services”, NIST Special Publication 800-95, August 2007.
View in Google Scholar
[3] NATO Network Enabled Feasibility Study Volume I: Overview of the NATO Network-Centric Operational Needs and Implications for the Development of Net-Centric Solutions, version 2.0.
View in Google Scholar
[4] „NEC Security Research Strategy”, RTO-TR-IST-045 Tech. Rep.
View in Google Scholar
[5] ITU-T Recommendation X.805 - Security architecture for systems providing end-to-end communications.
View in Google Scholar
[6] J. J. Brennan, „Information Assurance for SOA”, The Mitre Corporation, 2009.
View in Google Scholar
[7] RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, IETF, 2008.
View in Google Scholar
[8] „Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0”, OASIS Standard, 15 March 2005 [Online]. Available: http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
View in Google Scholar
Downloads
Submitted
Published
Issue
Section
License
Copyright (c) 2023 Journal of Telecommunications and Information Technology

This work is licensed under a Creative Commons Attribution 4.0 International License.