Secure interoperability with O2O contracts - Archive ouverte HAL Accéder directement au contenu
Chapitre D'ouvrage Année : 2010

Secure interoperability with O2O contracts

Résumé

The evolution of markets and the high volatility of business requirements put an increasing emphasis on the ability for systems to accommodate the changes required by new organizational needs while maintaining security objectives satisfiability. This is even more true in case of collaboration and interoperability between different organizations and thus between their information systems. Usual solutions do not anticipate interoperability security requirements or do it in a non satisfactory way. In this chapter, we propose a contract and compatibility principles within a formal framework O2OSecure to achieve a secure interoperation. Contracts are used to explicitly represent the rules that determine the way interaction between organizations must be controlled to satisfy secure accesses to resources. Compatibility relations make it possible to derive interoperability security policies. We specify all the wheelwork of interoperation between organizations which might manage their security policies using access control model RBAC and/or OrBAC. Furthermore, as interoperation may lead to a lot of exchanges of information before and during the interoperability session, in particular those related to credentials and security policies, we propose to ensure privacy protection to use the O2O licence administrative view and an XML block based access control technique to obfuscate some of the information exchanged.
Fichier principal
Vignette du fichier
SITIS_Interoperability_Cuppens.pdf (1.76 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00609293 , version 1 (18-07-2011)

Identifiants

  • HAL Id : hal-00609293 , version 1

Citer

Céline Coma-Brebel, Nora Cuppens-Bouhlahia, Frédéric Cuppens. Secure interoperability with O2O contracts. Web-based information technologies and distributed systems, 2, Atlantic Press, pp.257 - 291, 2010, Atlantis and pervasive intelligence, 978-9078677284. ⟨hal-00609293⟩
208 Consultations
219 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More