Managing Access to Service Providers in Federated Identity Environments: A Case Study in a Cloud Storage Service

DINIZ, Thomas, DE FELIPPE, Andre Castro, MEDEIROS, Taina, DA SILVA, Carlos and ARAUJO, Roberto (2015). Managing Access to Service Providers in Federated Identity Environments: A Case Study in a Cloud Storage Service. In: 2015 XXXIII Brazilian Symposium on Computer Networks and Distributed Systems. IEEE, 199-207.

Preview

PDF SBRC2015-main-IEEE.pdf - Accepted Version All rights reserved. Download (831kB) | Preview

Abstract

© 2015 IEEE. Currently the diversity of services, which are adhering to Identity Federation, has raised new challenges in the area. Increasingly, service providers need to control the access to their resources by users from the federation as, even though the user is authenticated by the federation, its access to resources cannot be taken for granted. Each Service Provider (SP) of a federation implements their own access control mechanism. Moreover, SPs might need to allow different access control granularity. For instance, all users from a particular Identity Provider (IdP) may access the resources due to some financial agreement. On the other hand, it might be the case that only specific users, or groups of users, have access to the resources. This paper proposes a solution to this problem through a hierarchical authorization system. Our approach, which can be customized to different SPs, allows the SP administrator to manage which IdPs, or users, have access to the provided resources. In order to demonstrate the feasibility of our approach, we present a case study in the context of a cloud storage solution.

Item Type:	Book Section
Uncontrolled Keywords:	Federated Identity Environments; Cloud Computing; Access Control
Identification Number:	https://doi.org/10.1109/SBRC.2015.32
Page Range:	199-207
SWORD Depositor:	Symplectic Elements
Depositing User:	Symplectic Elements
Date Deposited:	31 Jan 2020 12:42
Last Modified:	18 Mar 2021 02:47
URI:	https://shura.shu.ac.uk/id/eprint/25233

Actions (login required)

View Item

Downloads

Publication Metrics