Publications - Pervasive Computing Laboratory

 Access control anotacionsemantica authentication Cloud computing coap compromise cryptography cynamon emadrid emrisco home network I-Shaper identity management inrisco inteligenciafuentesabiertas Internet of Things IoT magos netlab Pervasive computing privacy Protocols Qursa raudo2 Security Smart Card Trust management Ubisec VANETs 
Show all
2009
 Arias-Cabarcos, Patricia;  Almenárez-Mendoza, Florina;  Marín-López, Andrés;  Díaz-Sánchez, Daniel
Enabling SAML for Dynamic Identity Federation Management Book Chapter 
In: vol. 308, pp. 173 - 184, Springer Berlin Heidelberg, 2009, ISBN: 978-3-642-03840-2.
Abstract | Links | BibTeX | Tags: identity provider, reputation score, trust decision, trust establishment, Trust Relationship, UICC-NFC
@inbook{bc003,

title = {Enabling SAML for Dynamic Identity Federation Management},

author = {Patricia Arias-Cabarcos and Florina Almenárez-Mendoza and Andrés Marín-López and Daniel Díaz-Sánchez },

url = {https://link.springer.com/chapter/10.1007/978-3-642-03841-9_16

https://link.springer.com/content/pdf/10.1007/978-3-642-03841-9.pdf},

doi = {https://doi.org/10.1007/978-3-642-03841-9_16},

isbn = {978-3-642-03840-2},

year  = {2009},

date = {2009-01-07},

urldate = {2009-01-07},

volume = {308},

pages = {173 - 184},

publisher = {Springer Berlin Heidelberg},

abstract = {Federation in identity management has emerged as a key concept for reducing complexity in the companies and offering an improved user experience when accessing services. In this sense, the process of trust establishment is fundamental to allow rapid and seamless interaction between different trust domains. However, the problem of establishing identity federations in dynamic and open environments that form part of Next Generation Networks (NGNs), where it is desirable to speed up the processes of service provisioning and deprovisioning, has not been fully addressed. This paper analyzes the underlying trust mechanisms of the existing frameworks for federated identity management and its suitability to be applied in the mentioned environments. This analysis is mainly focused on the Single Sign On (SSO) profile. We propose a generic extension for the SAML standard in order to facilitate the creation of federation relationships in a dynamic way between prior unknown parties. Finally, we give some details of implementation and compatibility issues.},

keywords = {identity provider, reputation score, trust decision, trust establishment, Trust Relationship, UICC-NFC},

pubstate = {published},

tppubtype = {inbook}

}

Close
Federation in identity management has emerged as a key concept for reducing complexity in the companies and offering an improved user experience when accessing services. In this sense, the process of trust establishment is fundamental to allow rapid and seamless interaction between different trust domains. However, the problem of establishing identity federations in dynamic and open environments that form part of Next Generation Networks (NGNs), where it is desirable to speed up the processes of service provisioning and deprovisioning, has not been fully addressed. This paper analyzes the underlying trust mechanisms of the existing frameworks for federated identity management and its suitability to be applied in the mentioned environments. This analysis is mainly focused on the Single Sign On (SSO) profile. We propose a generic extension for the SAML standard in order to facilitate the creation of federation relationships in a dynamic way between prior unknown parties. Finally, we give some details of implementation and compatibility issues.
Close
https://link.springer.com/chapter/10.1007/978-3-642-03841-9_16
https://link.springer.com/content/pdf/10.1007/978-3-642-03841-9.pdf
doi:https://doi.org/10.1007/978-3-642-03841-9_16
Close
2004
 Almenarez, Florina;  Díaz, Daniel;  Marín, Andrés
Secure Ad-Hoc mBusiness: Enhancing WindowsCE Security Journal Article 
In: Lecture Notes In Computer Sciences, vol. 3184, pp. 90-99, 2004, ISSN: 0302-9743.
Abstract | Links | BibTeX | Tags: EasyWireless, everyware, Mutual Authentication, Smart Card, Trust Degree, Trust Relationship, Trusted Third Party, Ubisec
@article{10.1007/978-3-540-30079-3_10,

title = {Secure Ad-Hoc mBusiness: Enhancing WindowsCE Security},

author = {Florina Almenarez and Daniel Díaz and Andrés Marín},

editor = {Sokratis Katsikas and Javier Lopez and Günther Pernul},

url = {https://link.springer.com/chapter/10.1007/978-3-540-30079-3_10

https://doi.org/10.1007/978-3-540-30079-3_10},

doi = {10.1007/978-3-540-30079-3_10},

issn = {0302-9743},

year  = {2004},

date = {2004-01-01},

urldate = {2004-01-01},

journal = {Lecture Notes In Computer Sciences},

volume = {3184},

pages = {90-99},

publisher = {Springer Berlin Heidelberg},

address = {Berlin, Heidelberg},

abstract = {Nowadays we can perform business transactions with remote servers interconnected to Internet using our personal devices. These transactions can also be possible without any infrastructure in pure ad-hoc networks. In both cases, interacting parts are often unknown, therefore, they require some mechanism to establish ad-hoc trust relationships and perform secure transactions. Operating systems for mobile platforms support secure communication and authentication, but this support is based on hierarchical PKI. For wireless communications, they use the (in)secure protocol WEP. This paper presents a WCE security enhanced architecture allowing secure transactions, mutual authentication, and access control based on dynamic management of the trusted certificate list. We have successfully implemented our own CSP to support the new certificate management and data ciphering.},

keywords = {EasyWireless, everyware, Mutual Authentication, Smart Card, Trust Degree, Trust Relationship, Trusted Third Party, Ubisec},

pubstate = {published},

tppubtype = {article}

}

Close
Nowadays we can perform business transactions with remote servers interconnected to Internet using our personal devices. These transactions can also be possible without any infrastructure in pure ad-hoc networks. In both cases, interacting parts are often unknown, therefore, they require some mechanism to establish ad-hoc trust relationships and perform secure transactions. Operating systems for mobile platforms support secure communication and authentication, but this support is based on hierarchical PKI. For wireless communications, they use the (in)secure protocol WEP. This paper presents a WCE security enhanced architecture allowing secure transactions, mutual authentication, and access control based on dynamic management of the trusted certificate list. We have successfully implemented our own CSP to support the new certificate management and data ciphering.
Close
https://link.springer.com/chapter/10.1007/978-3-540-30079-3_10
https://doi.org/10.1007/978-3-540-30079-3_10
doi:10.1007/978-3-540-30079-3_10
Close