Symposium on Identity and Trust on the Internet最新文献_第2页

Safeguarding digital identity: the SPICI (Sharing Policy, Identity, and Control Information) approach to negotiating identity federation and sharing agreements 保护数字身份:协商身份联盟和共享协议的SPICI(共享策略、身份和控制信息)方法

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527024

D. Bodeau

引用次数: 0

Identity, credential, and access management at NASA, from Zachman to attributes NASA的身份、凭证和访问管理，从Zachman到属性

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527019

Corinne S. Irwin, Dennis C. Taylor

引用次数: 6

Usable secure mailing lists with untrusted servers 可用的安全邮件列表与不受信任的服务器

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527032

R. Bobba, Joe Muggli, Meenal Pant, J. Basney, H. Khurana

{"title":"Usable secure mailing lists with untrusted servers","authors":"R. Bobba, Joe Muggli, Meenal Pant, J. Basney, H. Khurana","doi":"10.1145/1527017.1527032","DOIUrl":"https://doi.org/10.1145/1527017.1527032","url":null,"abstract":"Mailing lists are a natural technology for supporting messaging in multi-party, cross-domain collaborative tasks. However, whenever sensitive information is exchanged on such lists, security becomes crucial. We have earlier developed a prototype secure mailing list solution called SELS (Secure Email List Services) based on proxy encryption techniques [20], which enables the transformation of cipher-text from one key to another without revealing the plain-text. Emails exchanged using SELS are ensured confidentiality, integrity, and authentication. This includes ensuring their confidentiality while in transit at the list server; a functionality that is uniquely supported by SELS through proxy re-encryption. In this work we describe our efforts in studying and enhancing the usability of the software system and our experiences in supporting a production environment that currently is used by more than 50 users in 11 organizations. As evidence of its deployability, SELS is compatible with common email clients including Outlook, Thunderbird, Mac Mail, Emacs, and Mutt. As evidence of its usability, the software is being used by several national and international incident response teams.","PeriodicalId":269454,"journal":{"name":"Symposium on Identity and Trust on the Internet","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134048623","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

A calculus of trust and its application to PKI and identity management 信任演算及其在PKI和身份管理中的应用

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527021

Jingwei Huang, D. Nicol

引用次数: 94

Personal identity verification (PIV) cards as federated identities: challenges and opportunities 个人身份验证(PIV)卡作为联邦身份:挑战和机遇

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527020

Sarbari Gupta

引用次数: 0

FileSpace: an alternative to CardSpace that supports multiple token authorisation and portability between devices FileSpace: CardSpace的替代方案，支持多个令牌授权和设备之间的可移植性

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527030

D. Chadwick

引用次数: 1

Usable trust anchor management 可用信任锚管理

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527025

Massimiliano Pala, S. A. Rea

{"title":"Usable trust anchor management","authors":"Massimiliano Pala, S. A. Rea","doi":"10.1145/1527017.1527025","DOIUrl":"https://doi.org/10.1145/1527017.1527025","url":null,"abstract":"Security in browsers is based upon users trusting a set of root Certificate Authorities (called Trust Anchors) which they may know little or nothing about. Browser vendors face a difficult challenge to provide an appropriate interface for users. Providing usable Trust Anchor Management (TAM) for users, applications and PKI deployers is a complex task. The PKIX working group at Internet Engineering Task Force (IETF) is working on a new protocol, the Trust Anchor Management Protocol (TAMP), which will provide a standardized method to automatically manage trust anchors in applications and devices. Although promising, this protocol does not go far enough to allow users to gather information about previously unknown trust anchors in an automatic fashion. We have proposed the PKI Resource Query Protocol (PRQP)---which is currently an Internet Draft on Experimental Track with IETF---to provide applications with an automatic discovery system for PKI management. In this paper we describe the basic architecture and capabilities of PRQP that allow Browsers to provide a more complete set of trust anchor management services. We also provide the design of a PRQP enabled infrastructure that uses a trust association mechanism to provide an easy solution for managing Trust Anchors for Virtual Organizations.","PeriodicalId":269454,"journal":{"name":"Symposium on Identity and Trust on the Internet","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121809124","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Privacy-preserving management of transactions' receipts for mobile environments 移动环境中交易收据的隐私保护管理

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527027

F. Paci, Ning Shang, Sam Kerr, Kevin Steuer, Jungha Woo, E. Bertino

{"title":"Privacy-preserving management of transactions' receipts for mobile environments","authors":"F. Paci, Ning Shang, Sam Kerr, Kevin Steuer, Jungha Woo, E. Bertino","doi":"10.1145/1527017.1527027","DOIUrl":"https://doi.org/10.1145/1527017.1527027","url":null,"abstract":"Users increasingly use their mobile devices for electronic transactions to store related information, such as digital receipts. However, such information can be target of several attacks. There are some security issues related to M-commerce: the loss or theft of mobile devices results in a exposure of transaction information; transaction receipts that are send over WI-FI or 3G networks can be easily intercepted; transaction receipts can also be captured via Bluetooth connections without the user's consent; and mobile viruses, worms and Trojan horses can access the transaction information stored on mobile devices if this information is not protected by passwords or PIN numbers. Therefore, assuring privacy and security of transactions' information, as well as of any sensitive information stored on mobile devices is crucial. In this paper, we propose a privacy-preserving approach to manage electronic transaction receipts on mobile devices. The approach is based on the notion of transaction receipts issued by service providers upon a successful transaction and combines Pedersen commitment and Zero Knowledge Proof of Knowledge (ZKPK) techniques and Oblivious Commitment-Based Envelope (OCBE) protocols. We have developed a version of such protocol for Near Field Communication (NFC) enabled cellular phones.","PeriodicalId":269454,"journal":{"name":"Symposium on Identity and Trust on the Internet","volume":"440 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132052824","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Palantir: a framework for collaborative incident response and investigation Palantir:协作事件响应和调查的框架

Symposium on Identity and Trust on the Internet Pub Date : 2009-04-14 DOI: 10.1145/1527017.1527023

H. Khurana, J. Basney, Mehedi Bakht, D. M. Freemon, Von Welch, R. Butler

{"title":"Palantir: a framework for collaborative incident response and investigation","authors":"H. Khurana, J. Basney, Mehedi Bakht, D. M. Freemon, Von Welch, R. Butler","doi":"10.1145/1527017.1527023","DOIUrl":"https://doi.org/10.1145/1527017.1527023","url":null,"abstract":"Organizations owning cyber-infrastructure assets face large scale distributed attacks on a regular basis. In the face of increasing complexity and frequency of such attacks, we argue that it is insufficient to rely on organizational incident response teams or even trusted coordinating response teams. Instead, there is need to develop a framework that enables responders to establish trust and achieve an effective collaborative response and investigation process across multiple organizations and legal entities to track the adversary, eliminate the threat and pursue prosecution of the perpetrators. In this work we develop such a framework for effective collaboration. Our approach is motivated by our experiences in dealing with a large-scale distributed attack that took place in 2004 known as Incident 216. Based on our approach we present the Palantir system that comprises conceptual and technological capabilities to adequately respond to such attacks. To the best of our knowledge this is the first work proposing a system model and implementation for a collaborative multi-site incident response and investigation effort.","PeriodicalId":269454,"journal":{"name":"Symposium on Identity and Trust on the Internet","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114209887","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 35

A federation of web services for Danish health care 丹麦卫生保健网络服务联合会

Symposium on Identity and Trust on the Internet Pub Date : 2008-03-04 DOI: 10.1145/1373290.1373305

E. Dalsgaard, Kåre Kjelstrøm, Jan Riis

{"title":"A federation of web services for Danish health care","authors":"E. Dalsgaard, Kåre Kjelstrøm, Jan Riis","doi":"10.1145/1373290.1373305","DOIUrl":"https://doi.org/10.1145/1373290.1373305","url":null,"abstract":"Having relevant, up-to-date information about a patient's health care history is often crucial for providing the appropriate treatment. In Denmark, IT systems have been built to support different work flows in the health sector, but the systems are rarely connected and have become islands of data.\u0000 To remedy this situation, a service-oriented architecture based on web services for online exchange of health care data between the vast array of heterogeneous IT systems in the sector is being built.\u0000 The architecture forms a federation of web services and enables secure and reliable authentication of end-users and systems in the Danish health sector. The architecture is based on national and international standards and specifications. Yet it defines its own profile for secure interchange of data due to a lack of available international profiles that could handle the special needs of the health sector at the time of project inception.\u0000 The architecture has evolved through a pilot project from mid 2005 to the end of 2007, and is being tested in a small scale 1st quarter 2008. This paper aims to convey experiences from the project, so rich in benefits that the architecture has been accepted and standardized as the foundation for the future of system integration in the health sector in Denmark.","PeriodicalId":269454,"journal":{"name":"Symposium on Identity and Trust on the Internet","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-03-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123718171","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12