Federated Security: The Shibboleth Approach

Federated Security: The Shibboleth Approach
复制标题

联合安全：Shibboleth 方法

DOI：
--
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
Ken Klingenstein
Ken Klingenstein
中科院分区：
--
文献类型：
--
作者：
R. Morgan;Scott Cantor;Steven Carmody;W. Hoehn;Ken Klingenstein

文献摘要

被引文献

相似文献

第4名2004 · EDUCAUSE QUARTERLY 13第五届年度教育现状调查1将“安全和身份管理”列为当今校园关键IT挑战的榜首。由于认识到保护网络资源的至关重要性，Internet 2于1999年建立了中间件计划（I2 MI）。虽然第二代互联网的建立是为了开发和部署先进的网络技术和应用程序，但从一开始就很清楚，高速网络只会为滥用提供更快的途径，除非在开发和部署这些网络的同时沿着管理和控制资源访问的改进方法。I2 MI将校园中间件架构师聚集在一起，致力于解决身份验证、授权和目录服务中的基本问题，使安全的机构间服务成为可能和实用。迄今为止，最具创新性的I2 MI工作是Shibboleth项目。2其主要产品Shibboleth系统支持用户安全访问基于网络的资源;使独立组织能够联合，以扩展其现有身份管理服务的能力;支持多组织联合，以实现技术的可扩展使用;鼓励基于属性的授权;安全管理提供了保护个人信息隐私的控制措施;联合安全：Shibboleth方法
Number 4 2004 • EDUCAUSE QUARTERLY 13 The Fifth Annual Educause Current Issues Survey1 ranked “security and identity management” near the top of the list of critical IT challenges on campus today. Recognition of the crucial importance of securing networked resources led Internet2 to establish its Middleware Initiative (I2MI) in 1999. While Internet2 was founded to develop and deploy advanced network technologies and applications, it was clear from the start that high-speed networks would simply provide a quicker path to abuse unless improved methods of managing and controlling access to resources were developed and deployed along with those networks. I2MI has brought together campus middleware architects to work on fundamental issues in authentication, authorization, and directory services to make secure inter-institutional services possible and practical. The most innovative I2MI effort to date is the Shibboleth Project.2 Its primary product, the Shibboleth System,  supports secure user access to Webbased resources;  enables independent organizations to federate to extend the capabilities of their existing identity-management services;  supports multi-organizational federations to enable scalable use of the technology;  encourages attribute-based authorization;  provides controls to protect the privacy of personal information; Federated Security: The Shibboleth Approach