NDLI: An open architecture for secure interworking services

Please wait, while we are loading the content...

A framework to support large-scale active applications

Towards a world-wide civilization of objects

NILE: wide-area computing for high energy physics

ETEL: a newspaper-based distributed information system

AFS and the web: competitors or collaborators?

Cryptographic support for fault-tolerant distributed computing

System support for mobility

Scalable information sharing in large scale distributed systems

Using events to build large scale distributed applications

The ACTIVE IP option

Supporting broad internet access to TACOMA

An architecture for a wide area distributed system

A multicast-based distributed file system for the internet

World wide failures

The persistent relevance of the local operating system to global applications

Mobile host tracking and resource discovery

Techniques for handling scale and distribution in virtual worlds

Transportable agents support worldwide applications

Wide-area information access to multimedia historical sources

A stake in cyberspace

Hinted caching in the web

How to scale transactional storage systems

Server operating systems

ATLAS: an infrastructure for global computing

Infrastructure for mobile agents

ParaWeb: towards world-wide supercomputing

DSM-CC for world wide applications

Using the web to coordinate distributed applications

Legion: flexible support for wide-area computing

Structured virtual synchrony: exploring the bounds of virtual synchronous group communication

Hidden capabilities: towards a flexible protection utility for the internet

Flexible distributed programming using mobile code

An open architecture for secure interworking services

The trading function in action

An overview of the Rialto real-time architecture

Migrants: self-moving object clusters

Adding realtime applets and quality of service support to the world wide web

Simulating wide-area replication

Bayou: replicated database services for world-wide applications

A flexible hybrid concurrency control model for collaborative applications in large scale settings

System support for knowledge-based trading in open service markets

Supporting longevity in an information infrastructure architecture

Information servers: a scaleable communication paradigm for wide area networks and the information superhighway

An open architecture for secure interworking services

Content Provider	ACM Digital Library
Author	Hayton, Richard Moody, Ken
Abstract	There is a developing need for applications and distributed services to cooperate or inter-operate. Current mechanisms can hide the heterogeneity of host operating systems and abstract the issues of distribution and object location. However, in order for systems to inter-operate securelythere must also be ways to hide differences in security policies, or at least to support negotiation between them.Other proposals for the interworking of security mechanisms have focussed on the enforcement of access policy at the expense of flexibility of expression of policy. This work describes a new architectural approach to security. The key idea is that a processis the universal client entity; a process may act on behalf of an identified individual as in traditional security schemes. More generally, a process may adopt an application-specific name or role, and this is used as the basis for authentication in Oasis. A service may then be written in terms of service-specific categories of clients, decoupled from the mechanisms used to specify and enforce access control policy.This approach allows great flexibility when integrating a number of services, and reduces the mismatch of policies that is common in heterogeneous systems. In addition, Oasis services may be integrated with alternative authentication and access control schemes, providing a truly open architecture.A flexible security definition is meaningless if not backed by a robust and efficient implementation. Oasis has been fully implemented, and is inherently distributed and scalable. In this paper we describe the general approach then concentrate on revocation, where security designs are most often criticised. Oasis is unique in supporting the rapid and selective revocation of privileges which can cascade between services and organisations.
Starting Page	233
Ending Page	240
Page Count	8
File Format	PDF
DOI	10.1145/504450.504491
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1996-09-09
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in