NDLI: Proving a WS-federation passive requestor profile with a browser model

Please wait, while we are loading the content...

An advisor for web services security policies

Reasoning about XACML policies using CSP

Enabling security, privacy, and transparency in an on dand world

Proving a WS-federation passive requestor profile with a browser model

Web services enterprise security architecture: a case study

An access control model for querying XML data

Tailoring the Dolev-Yao abstraction to web services realities

XML signature element wrapping attacks and countermeasures

Policy-based dissemination of partial web-ontologies

Fuzzy nature of trust and dynamic trust modeling in service oriented environments

CHRONOS: an authenticated dictionary based on skip lists for timestamping systems

Proving a WS-federation passive requestor profile with a browser model

Content Provider	ACM Digital Library
Author	Pfitzmann, Birgit Sadeghi, Ahmad-Reza Groβ, Thomas
Abstract	Web-based services are an important business area. For usability and cost-effectiveness these services require users to rely only on standard browsers. A representative class of such applications, currently in the focus of many industrial players, is Federated Identity Managent (FIM). In this context we are facing challenging probls: on the one hand, the security of the existing FIM protocols (including Microsoft Passport, OASIS SAML, and Liberty) is not yet based on rigorous proofs and has been challenged by several analyses. On the other hand, the existing formal security models and proof methods cannot be applied to browser-based protocols in a straightforward manner since they only consider protocol-aware principals: they assume that the involved principals behave according to the specification of the security protocol unless they are corrupted. Web browsers, in contrast, have predefined features and are unaware of the protocol they are involved in.Based on a generic framework for security proofs of browser-based protocols, we model an important FIM protocol, the WS-Federation Passive Requestor Interop profile. We rigorously prove that the protocol provides authenticity and secure channel establishment in a realistic trust scenario. This constitutes the first rigorous security proof for a browser-based identity federation protocol.
Starting Page	54
Ending Page	64
Page Count	11
File Format	PDF
ISBN	1595932348
DOI	10.1145/1103022.1103034
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2005-11-11
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Identity federation Web service security Web browser Security proof of protocols Ws-federation passive requestor profile Wsfpi Single signon
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in