Aufgrund von Vorbereitungen auf eine neue Version von KOPS, können kommenden Montag und Dienstag keine Publikationen eingereicht werden. (Due to preparations for a new version of KOPS, no publications can be submitted next Monday and Tuesday.)

Hecate, Managing Authorization with RESTful XML

Cite This

Files in this item

Checksum: MD5:1f45c49f8656f18c9a0f09918687d85d

GRAF, Sebastian, Vyacheslav ZHOLUDEV, Lukas LEWANDOWSKI, Marcel WALDVOGEL, 2011. Hecate, Managing Authorization with RESTful XML. Second International Workshop on RESTful Design - WS-REST '11. Hyderabad, India, Mar 28, 2011 - Mar 28, 2011. In: Proceedings of the Second International Workshop on RESTful Design - WS-REST '11. New York, New York, USA:ACM Press, pp. 51-58. ISBN 978-1-4503-0623-2. Available under: doi: 10.1145/1967428.1967442

@inproceedings{Graf2011Hecat-12623, title={Hecate, Managing Authorization with RESTful XML}, year={2011}, doi={10.1145/1967428.1967442}, isbn={978-1-4503-0623-2}, address={New York, New York, USA}, publisher={ACM Press}, booktitle={Proceedings of the Second International Workshop on RESTful Design - WS-REST '11}, pages={51--58}, author={Graf, Sebastian and Zholudev, Vyacheslav and Lewandowski, Lukas and Waldvogel, Marcel}, note={Link zur Originalveröffentlichung:} }

<rdf:RDF xmlns:dcterms="" xmlns:dc="" xmlns:rdf="" xmlns:bibo="" xmlns:dspace="" xmlns:foaf="" xmlns:void="" xmlns:xsd="" > <rdf:Description rdf:about=""> <dcterms:isPartOf rdf:resource=""/> <dcterms:issued>2011</dcterms:issued> <dspace:hasBitstream rdf:resource=""/> <dcterms:bibliographicCitation>WS-REST '11 : Proceedings of the Second International Workshop on RESTful Design, New York : ACM, 2011. - ISBN 978-1-4503-0623-2</dcterms:bibliographicCitation> <dcterms:available rdf:datatype="">2011-05-12T09:34:55Z</dcterms:available> <dcterms:rights rdf:resource=""/> <void:sparqlEndpoint rdf:resource="http://localhost/fuseki/dspace/sparql"/> <dc:date rdf:datatype="">2011-05-12T09:34:55Z</dc:date> <dc:language>eng</dc:language> <dc:creator>Waldvogel, Marcel</dc:creator> <foaf:homepage rdf:resource="http://localhost:8080/jspui"/> <dc:contributor>Graf, Sebastian</dc:contributor> <dc:creator>Graf, Sebastian</dc:creator> <dspace:isPartOfCollection rdf:resource=""/> <dcterms:title>Hecate, Managing Authorization with RESTful XML</dcterms:title> <dc:contributor>Zholudev, Vyacheslav</dc:contributor> <dc:creator>Zholudev, Vyacheslav</dc:creator> <dcterms:hasPart rdf:resource=""/> <dc:contributor>Lewandowski, Lukas</dc:contributor> <dc:creator>Lewandowski, Lukas</dc:creator> <bibo:uri rdf:resource=""/> <dc:rights>terms-of-use</dc:rights> <dc:contributor>Waldvogel, Marcel</dc:contributor> <dcterms:abstract xml:lang="eng">The potentials of REST offers new ways for communications between louse coupled entities featured through the Web of Things [12]. The binding of the disjunct components of this architecture creates security issues, such as the centralized authorization techniques respecting the independence of the underlying entities. This results in the question how authorization is performed respecting the flexibility of REST without any knowledge about the underlying resources. Nevertheless, possible knowledge about these resources should enable the authorization workflow to offer finer-granular permissions on substructures of the resources. With our new approach - we named Hecate- we offer a framework to assure simplified handling while keeping the potentials and flexibility of REST . We have designed an architecture based on XML with a flexible authorization mechanism on the one hand and optional resource-awareness on the other hand. The flexibility within the authorization work-flow bases on permission sets respecting the HTTP- verbs. Additional in-depth knowledge of the entity option- ally extends these permissions with resource-aware filters. Hecate offers not only great benefits because of its flexibility, but also because of the optional extensibility proved within the two reference implementations. With Hecate, we show that a centralized authorization mechanism combining independence and optional resource-based filtering extends the flexibility of REST rather than restricting it.</dcterms:abstract> </rdf:Description> </rdf:RDF>

Downloads since Oct 1, 2014 (Information about access statistics)

Hecate_Graf.pdf 577

This item appears in the following Collection(s)

Search KOPS


My Account