Identity Federation Broker for Service Cloud

Abstract. Federation is currently finding a wide argumentation in Cloud Computing. The federation among cloud operators should allow new opportunities and businesses even making the role of SMEs crucial in these new scenarios. In this work, we provide a solution on how to federate Storage Cloud providers, enabling the transparent and dynamic federation among storage suppliers adding new functionalities for end-users. VISION Cloud represents the reference architecture dealing with Storage Clouds, and our work attempts to design a solution applied on VISION, but suitable for any similar architecture.

show abstract

“…An interesting work is presented in [10]. The authors made up an identity federation broker for service cloud.…”

Section: Related Workmentioning

confidence: 99%

How to Federate VISION Clouds through SAML/Shibboleth Authentication

Villari

Tusa

Celesti

et al. 2012

Service-Oriented and Cloud Computing

View full text Add to dashboard Cite

show abstract

“…A federation scheme more like the user-centric scheme, but instead of the related group of users, there is a multilateral federation of a group of users [31]. In case of different enterprises need user others application in single private or public cloud or even a hybrid multi-cloud, this scheme is a solution [32].…”

Section: Federation Idmmentioning

confidence: 99%

Preserving Privacy in Cloud Identity Management Systems Using DCM (Dual Certificate Management)

Khajehei¹

2018

IJWMT

View full text Add to dashboard Cite

In these days all businesses trying to use global applications on cloud computing infrastructure to reduce their costs and also decentralize their application. This movement also causes more security risks over the unbounded cloud environment. Therefore, accessing enterprise information for an unwanted user will be more than other environments.Thus, the proposed Identity Management System (IDMS) tries to preserve security in communication between clients and server over cloud computing. The proposed method suggested token based Identity Management and also enhanced privacy by adding one. Dual Certificate Manager (DCM) block is a replacement for a combination of symmetric and asymmetric cryptography, which is commonly used for SSL/TLS protocol to immune data transmission, uses asymmetric cryptography in both participants.Furthermore, for more privacy and invulnerability DCM uses Elliptic Curve Cryptography (ECC) as asymmetric cryptography algorithm.

show abstract

“…Huang et al present [9] an Identity Federation Broker for service clouds. They address federation in the context of SaaS services in which SAML represents the basic protocol.…”

Section: Vision Cloud Delegation Scenariosmentioning

confidence: 99%

Delegation across storage clouds: on-boarding federation as a case study

Formisano¹,

Kolodner²,

Shulman‐Peleg³

et al. 2014

SCPE

View full text Add to dashboard Cite

Abstract. As the volume of digital data rapidly increases, storage clouds are becoming a popular solution for both enterprise and personal data, and the number of storage cloud solutions is also increasing. However, these solutions do not yet deal with the need of customers for interoperability and data migration from one cloud to another. These issues can be addressed through federation of cloud infrastructures. An important aspect of federation is delegation of access control, where one actor, e.g., an end user, authorizes another actor, e.g., a cloud provider, to act on its behalf, typically with a subset of its access rights, safely and securely.This paper deals with delegation across storage clouds. We describe a delegation architecture for on-boarding federation, which allows an enterprise to efficiently migrate its data from one storage cloud provider to another (e.g., for business or legal reasons), while providing continuous access and a unified view over the data during the migration. In our architecture a user delegates a subset of his access rights on the source and destination clouds to an on-boarding federation layer on the destination cloud. This enables on-boarding to occur in a safe and secure way, such that the on-boarding layer has the least privilege required to carry out its work. We evaluate the security implications of delegation that need to be taken into account for on-boarding. We also show how the delegation architecture can be implemented using the Security Assertion Markup Language.

show abstract

Identity Federation Broker for Service Cloud

Cited by 27 publications

References 0 publications

How to Federate VISION Clouds through SAML/Shibboleth Authentication

How to Federate VISION Clouds through SAML/Shibboleth Authentication

Preserving Privacy in Cloud Identity Management Systems Using DCM (Dual Certificate Management)

Delegation across storage clouds: on-boarding federation as a case study

Contact Info

Product

Resources

About