NDLI: A simple collaborative method in Web proxy access control for supporting complex authentication mechanisms

Content Provider	IEEE Xplore Digital Library
Author	Takada, S. Sato, A. Shinjo, Y. Nakai, H. Sakurai, K. Itano, K.
Copyright Year	2012
Description	Author affiliation: Grad. Sch. of Syst. & Inf. Eng., Univ. of Tsukuba, Tsukuba, Japan (Takada, S.; Sato, A.; Shinjo, Y.; Sakurai, K.; Itano, K.) \|\| Grad. Sch. of Libr., Inf. & Media Studies, Univ. of Tsukuba, Tsukuba, Japan (Nakai, H.)
Abstract	Modern authentication mechanisms, including Shibboleth and OAuth, provide user attributes such as affiliations and e-mail addresses. Conventional collaborative methods have problems using such attributes in egress access control for the Web. This paper proposes a new collaborative method using Web browsers, proxy servers, and authentication servers. The proposed method simplifies communications among these elements by using a trusted shared repository that stores user attributes. A new authentication mechanism can be added to the system by deploying an authentication server of the new authentication mechanism. This authentication server is a Web application and stores user attributes in a shared repository associated with the user identifiers. When proxy servers receive requests from Web browsers, the proxy servers retrieve user attributes from the shared repository and the proxy servers decide whether or not to allow access to external Web pages in accordance with the URLs and relevant user attributes. Unlike in a standard such as the Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO), neither Web browsers nor proxy servers are required to include extensions for authentication mechanisms. On the basis of the simple collaborative method, the authors have implemented an egress access control system for the Web that performs user authentication with Shibboleth and Facebook. The access control system has been operational in a university library for more than a year.
Starting Page	190
Ending Page	199
File Size	941128
Page Count	10
File Format	PDF
ISBN	9781467327404
DOI	10.4108/icst.collaboratecom.2012.250446
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-10-14
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	ICST
Subject Keyword	Web proxy servers user authentication access control Registers Servers Shibboleth Local area networks OAuth
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Design and Implementation of Web Forward Proxy with Shibboleth Authentication

Development of Network User Authentication System Using OpenFlow

A Technology of User Access-Control Table and Identity Authentication Based on USB in LAN

An Identification Method of PCs behind NAT Router with Proxy Authentication on HTTP Communication

Enhancing OAuth services security by an authentication service with face recognition

Fine-Grained Access Control in the Chirp Distributed File System

Overview of authentication protocols

Re-engineering of web reverse proxy with shibboleth authentication

A Seamless Connection for Authentication Required Web Sites by Shibboleth

A simple collaborative method in Web proxy access control for supporting complex authentication mechanisms

Similar Documents

Design and Implementation of Web Forward Proxy with Shibboleth Authentication

Development of Network User Authentication System Using OpenFlow

A Technology of User Access-Control Table and Identity Authentication Based on USB in LAN

An Identification Method of PCs behind NAT Router with Proxy Authentication on HTTP Communication

Enhancing OAuth services security by an authentication service with face recognition

Fine-Grained Access Control in the Chirp Distributed File System

Overview of authentication protocols

Re-engineering of web reverse proxy with shibboleth authentication

A Seamless Connection for Authentication Required Web Sites by Shibboleth

A simple collaborative method in Web proxy access control for supporting complex authentication mechanisms