1st draft version of introduction ready
The first draft version of the introduction for the thesis is now ready.
To download you can use following link: Download Intro Draft
December 02, 2005
December 01, 2005
First draft of the Method Chapter
We have finished the first draft of the Method chapter. Many issues still need to be addressed, but the overall structure of the chapter is now in place.
The document can be downloaded using the link below.
October 26, 2005
IM mindmap
September 23, 2005
Identity Management - A short presentation of our thesis.
The thesis will present a study of business and technical implications, both pros and cons, of identity management (IM), Single Sign-On (SSO), and Open Standards based on a concrete use case.
This leads us to the area of standards based identity management. An analysis of open standards and solutions will be covered. This analysis will focus on Rule/Role-based access control (RBAC) and Security Assertions Markup Language (SAML) in particular.
The project will focus on Rule/Role-based access control (RBAC) as a preferential approach to identity management based on open standards.
Based on a practical implementation of rule based access control using SAML with standards-based catalogues (Lightweight Directory Access Protocol LDAP-directories) and signatures (public certificates for electronic service - OCES), an analysis of the practical as well as architectural aspects of identity management based on open standards will be covered.
The fundamental objective of any business oriented IT system is to create an open infrastructure that supports the business. The architectural reference used in the project reflects this: SAML supports encryption of data in http/s sessions between SAML-enabled servers that are doing Web SSO and RBAC. SAML offers SOAP-based messaging protocol for Web SSO, including XML-based data structures (SAML assertions) that help enabling standards based services based on user roles and business rules. To put it simple, it is possible to create a direct “connection” between systems, people and processes.
Any questions, ideas, or other important messages can be sent to us using either of the following email adresses: amhae03@itu.dk or torsten@itu.dk