On the design of a trust enhanced distributed authorisation architecture for service oriented architectures

Aarthi Krishna; Vijay Varadharajan; Nathan Tarr

doi:10.1109/TrustCom.2013.246

On the design of a trust enhanced distributed authorisation architecture for service oriented architectures

Aarthi Krishna, Vijay Varadharajan, Nathan Tarr

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

Abstract

Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a comprehensive trust enhanced distributed authorisation architecture that provides a holistic framework for authorisation taking into account the state of a user platform. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the overall model and then describe our hybrid model with 'hard' and 'soft' trust components, followed by a description of the system architecture. We then illustrate proposed architecture in the context of a simple scenario involving a social networking system.

Original language	English
Title of host publication	Proceedings
Subtitle of host publication	12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia
Place of Publication	Piscataway, NJ
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	517-524
Number of pages	8
ISBN (Print)	9780769550220
DOIs	https://doi.org/10.1109/TrustCom.2013.246
Publication status	Published - 2013
Event	12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013 - Melbourne, VIC, Australia Duration: 16 Jul 2013 → 18 Jul 2013

Other

Other	12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013
Country/Territory	Australia
City	Melbourne, VIC
Period	16/07/13 → 18/07/13

Access to Document

10.1109/TrustCom.2013.246

Cite this

Krishna, A., Varadharajan, V., & Tarr, N. (2013). On the design of a trust enhanced distributed authorisation architecture for service oriented architectures. In Proceedings: 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia (pp. 517-524). [6680882] Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/TrustCom.2013.246

Krishna, Aarthi ; Varadharajan, Vijay ; Tarr, Nathan. / On the design of a trust enhanced distributed authorisation architecture for service oriented architectures. Proceedings: 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia. Piscataway, NJ : Institute of Electrical and Electronics Engineers (IEEE), 2013. pp. 517-524

@inproceedings{a7791b45263240fc8c5b70c9d3bb4fd5,

title = "On the design of a trust enhanced distributed authorisation architecture for service oriented architectures",

abstract = "Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a comprehensive trust enhanced distributed authorisation architecture that provides a holistic framework for authorisation taking into account the state of a user platform. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the overall model and then describe our hybrid model with 'hard' and 'soft' trust components, followed by a description of the system architecture. We then illustrate proposed architecture in the context of a simple scenario involving a social networking system.",

author = "Aarthi Krishna and Vijay Varadharajan and Nathan Tarr",

year = "2013",

doi = "10.1109/TrustCom.2013.246",

language = "English",

isbn = "9780769550220",

pages = "517--524",

booktitle = "Proceedings",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013 ; Conference date: 16-07-2013 Through 18-07-2013",

}

Krishna, A, Varadharajan, V & Tarr, N 2013, On the design of a trust enhanced distributed authorisation architecture for service oriented architectures. in Proceedings: 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia., 6680882, Institute of Electrical and Electronics Engineers (IEEE), Piscataway, NJ, pp. 517-524, 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, Melbourne, VIC, Australia, 16/07/13. https://doi.org/10.1109/TrustCom.2013.246

On the design of a trust enhanced distributed authorisation architecture for service oriented architectures. / Krishna, Aarthi; Varadharajan, Vijay; Tarr, Nathan.
Proceedings: 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia. Piscataway, NJ: Institute of Electrical and Electronics Engineers (IEEE), 2013. p. 517-524 6680882.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - On the design of a trust enhanced distributed authorisation architecture for service oriented architectures

AU - Krishna, Aarthi

AU - Varadharajan, Vijay

AU - Tarr, Nathan

PY - 2013

Y1 - 2013

N2 - Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a comprehensive trust enhanced distributed authorisation architecture that provides a holistic framework for authorisation taking into account the state of a user platform. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the overall model and then describe our hybrid model with 'hard' and 'soft' trust components, followed by a description of the system architecture. We then illustrate proposed architecture in the context of a simple scenario involving a social networking system.

AB - Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a comprehensive trust enhanced distributed authorisation architecture that provides a holistic framework for authorisation taking into account the state of a user platform. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the overall model and then describe our hybrid model with 'hard' and 'soft' trust components, followed by a description of the system architecture. We then illustrate proposed architecture in the context of a simple scenario involving a social networking system.

UR - http://www.scopus.com/inward/record.url?scp=84893511171&partnerID=8YFLogxK

U2 - 10.1109/TrustCom.2013.246

DO - 10.1109/TrustCom.2013.246

M3 - Conference proceeding contribution

AN - SCOPUS:84893511171

SN - 9780769550220

SP - 517

EP - 524

BT - Proceedings

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Piscataway, NJ

T2 - 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013

Y2 - 16 July 2013 through 18 July 2013

ER -

Krishna A, Varadharajan V, Tarr N. On the design of a trust enhanced distributed authorisation architecture for service oriented architectures. In Proceedings: 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013, 11th IEEE International Symposium on Parallel and Distributed Processing with Applications, ISPA-13, 12th IEEE International Conference on Ubiquitous Computing and Communications, IUCC-2013, 16-18 July 2013, Melbourne, Victoria, Australia. Piscataway, NJ: Institute of Electrical and Electronics Engineers (IEEE). 2013. p. 517-524. 6680882 doi: 10.1109/TrustCom.2013.246

On the design of a trust enhanced distributed authorisation architecture for service oriented architectures

Abstract

Other

Access to Document

Other files and links

Fingerprint

Cite this