Polybius : Secure Web Single-Sign-On for Legacy Applications

Gienger, Pascal; Waldvogel, Marcel

Polybius : Secure Web Single-Sign-On for Legacy Applications

Dateien

Polybius-DFN.pdfGröße: 473.37 KBDownloads: 381

Datum

2011

Projekt

bwIDM - Föderatives Identitätsmanagement

Open Access-Veröffentlichung

Open Access Green

Sammlungen

Informatik und Informationswissenschaft

Publikationstyp

Beitrag zu einem Konferenzband

Publikationsstatus

Published

Erschienen in

4. DFN-Forum Kommunikationstechnologien ; 20./ 21.6.2011, Bonn, Germany. 2011

Zusammenfassung

Web-based interfaces to applications in all domains of university life are surging. Given the diverse demands in and the histories of universities, combined with the rapid IT industry developments, all attempts at a sole all-encompassing platform for single-sign-on (SSO) will remain futile. In this paper, we present an architecture for a meta-SSO, which is able to seamlessly integrate with a wide variety of existing local sign-in and SSO mechanisms. It is therefore an excellent candidate for a university-wide all-purpose SSO system. Among the highlights are: No passwords are ever stored on disk, neither in the browser nor in the gateway; its basics have been implemented in a simple, yet versatile Apache module; and it can help reducing the impact of security problems anywhere in the system. It could even form the basis for secure inter-university collaborations and mutual outsourcing.

Fachgebiet (DDC)

004 Informatik

Schlagwörter

Authentification, Identity Management, Single Sign-On, Authentifikation, Identitätsverwaltung

Konferenz

4. DFN-Forum Kommunikationstechnologien, 20. Juni 2011 - 21. Juni 2011, Bonn, Germany

Zitieren

ISO 690

GIENGER, Pascal, Marcel WALDVOGEL, 2011. Polybius : Secure Web Single-Sign-On for Legacy Applications. 4. DFN-Forum Kommunikationstechnologien. Bonn, Germany, 20. Juni 2011 - 21. Juni 2011. In: 4. DFN-Forum Kommunikationstechnologien ; 20./ 21.6.2011, Bonn, Germany. 2011

BibTex

@inproceedings{Gienger2011Polyb-14943,
  year={2011},
  title={Polybius : Secure Web Single-Sign-On for Legacy Applications},
  booktitle={4. DFN-Forum Kommunikationstechnologien ; 20./ 21.6.2011, Bonn, Germany},
  author={Gienger, Pascal and Waldvogel, Marcel}
}

RDF

<rdf:RDF
    xmlns:dcterms="http://purl.org/dc/terms/"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:bibo="http://purl.org/ontology/bibo/"
    xmlns:dspace="http://digital-repositories.org/ontologies/dspace/0.1.0#"
    xmlns:foaf="http://xmlns.com/foaf/0.1/"
    xmlns:void="http://rdfs.org/ns/void#"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema#" > 
  <rdf:Description rdf:about="https://kops.uni-konstanz.de/server/rdf/resource/123456789/14943">
    <dcterms:bibliographicCitation>Presented at: 4. DFN-Forum Kommunikationstechnologien ; 20./21.6.2011, Bonn, Germany</dcterms:bibliographicCitation>
    <bibo:uri rdf:resource="http://kops.uni-konstanz.de/handle/123456789/14943"/>
    <dc:contributor>Gienger, Pascal</dc:contributor>
    <dcterms:hasPart rdf:resource="https://kops.uni-konstanz.de/bitstream/123456789/14943/2/Polybius-DFN.pdf"/>
    <dcterms:title>Polybius : Secure Web Single-Sign-On for Legacy Applications</dcterms:title>
    <dcterms:available rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2011-10-05T10:01:28Z</dcterms:available>
    <dcterms:isPartOf rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/36"/>
    <dspace:isPartOfCollection rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/36"/>
    <dcterms:rights rdf:resource="https://rightsstatements.org/page/InC/1.0/"/>
    <dc:date rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2011-10-05T10:01:28Z</dc:date>
    <dc:rights>terms-of-use</dc:rights>
    <dc:contributor>Waldvogel, Marcel</dc:contributor>
    <dspace:hasBitstream rdf:resource="https://kops.uni-konstanz.de/bitstream/123456789/14943/2/Polybius-DFN.pdf"/>
    <dc:creator>Waldvogel, Marcel</dc:creator>
    <dcterms:abstract xml:lang="eng">Web-based interfaces to applications in all domains of university life are surging. Given the diverse demands in and the histories of universities, combined with the rapid IT industry developments, all attempts at a sole all-encompassing platform for single-sign-on (SSO) will remain futile. In this paper, we present an architecture for a meta-SSO, which is able to seamlessly integrate with a wide variety of existing local sign-in and SSO mechanisms. It is therefore an excellent candidate for a university-wide all-purpose SSO system. Among the highlights are: No passwords are ever stored on disk, neither in the browser nor in the gateway; its basics have been implemented in a simple, yet versatile Apache module; and it can help reducing the impact of security problems anywhere in the system. It could even form the basis for secure inter-university collaborations and mutual outsourcing.</dcterms:abstract>
    <dc:language>eng</dc:language>
    <void:sparqlEndpoint rdf:resource="http://localhost/fuseki/dspace/sparql"/>
    <foaf:homepage rdf:resource="http://localhost:8080/"/>
    <dc:creator>Gienger, Pascal</dc:creator>
    <dcterms:issued>2011</dcterms:issued>
  </rdf:Description>
</rdf:RDF>

Universitätsbibliographie

Ja