Digital Identity
Digital identity can be discussed in the context of a set of concepts that provide a framework for addressing the important issues involved in developing an organizational identity management strategy.
The following sections provide reference to information about each area in the framework. At first, these are mostly reference to standards documents and articles about standards in each area. I hope to add other references about the general problem areas as well in the future.
Phil Windley
Related tags:
Links
|
http://portal.acm.org/citation.cfm?id=1133058.1133089
Presented at ACM Symposium on Access Control Models and Technologies 2006, Lake Tahoe, California, USA, June 07 - 09, 2006. "XACML is the OASIS standard language for the specification of authorization and entitlement policies. However, while XACML well addresses security requirements of a single enterprise (even if large and composed by multiple departments), it does not address the requirements of virtual enterprises built through collaboration of several autonomous subjects sharing their resources. In this paper we highlight such limitations and we propose an XACML extension, the policy integration algorithm, to address them. In the paper we also discuss in which respect the process of comparing two XACML policies differs from the process used to compare other business rules."
- Digital Identity - Authentication and authorization - Authorization policy representation and management -
|
|
Added
1296 days ago
|
Review It
Bookmark It
|
http://java.sun.com/developer/technicalArticles/xml/dig_signatures/index.html
Extensible Markup Language (XML) technology is now an integral part of web-based business applications. These applications require a fundamentally sound and secure infrastructure to meet the security requirements of confidentiality, endpoint authentication, message integrity, and nonrepudiation. XML signature, XML encryption, XML Key Management Specification (XKMS), Security Assertion Markup Language (SAML), and XML Access Control Markup Language (XACML) are the XML security standards that define XML vocabularies and processing rules to meet these security requirements.
- Java - Digital Identity - Authentication and authorization -
|
|
Added
1301 days ago
|
Review It
Bookmark It
|
http://1raindrop.typepad.com/1_raindrop/2006/07/intro_to_identi.html
In this issue of the IEEE Security & Privacy Journal, I have an article on Introduction to Identity Management Risk Metrics it is in the "Build Security In" column that I co-edit with John Steven. The article looks at ways to use metrics to measure and monitor identity's distribution, quality, affiliation, and governance in the enterprise. There are specific tips for identity and security architects on how to locate and use metrics in their identity management processes and systems.
- Digital Identity -
|
|
Added
1302 days ago
|
Review It
Bookmark It
|
http://www.s-ox.com/news/detail.cfm?articleID=1909
To address customer demand for access management capabilities that extend beyond traditional Web-based applications, Oracle has announced the Oracle Extended Identity Management Ecosystem and Reference Architecture. Furthering its support for customers with heterogeneous IT environments, Oracle has teamed with global Independent Software Vendors (ISVs) to deliver a comprehensive blueprint for enterprise security capabilities that span strong authentication, network, legacy and physical access applications. Oracle Identity Management’s support of industry standards such as WS*, XACML, SAML and SPML enable customers and partners to more easily integrate applications with the framework.
- Digital Identity - SAML -
|
|
Added
1307 days ago
|
Review It
Bookmark It
|
http://informationr.net/ir/11-2/paper249.html
This paper describes a novel approach that combines data from direct observation, user surveys and server logs to analyse users' browsing behaviour. It is based on a longitudinal study of university students' use of a Website related to one of their courses. The data was analysed using footstep graphs to categorise browsing behaviour into pre-defined strategies and comparing these with data from questionnaires and direct observation of the students' actual use of the site.
- Website Administration - Usability - Digital Identity -
|
|
Added
1483 days ago
|
Review It
Bookmark It
|
http://www.identity20.com/media/OSCON2005/
As the online world moves towards Web 2.0, the concept of digital identity is evolving, and existing identity systems are falling behind. New systems are emerging that place identity in the hands of users instead of directories. Simple, secure and open, these systems will provide the scalable, user-centric mechanism for authenticating and managing real-world identities online, enabling truly distinct and portable Internet identities. OSCON Presentation by Dick Hardt, Sxip.
- Digital Identity - Web 2.0 -
|
|
Added
1587 days ago
|
Review It
Bookmark It
