loading...
Multiple-Tiered Security Hierarchy for Web Applications Using Central Authentication and Authorization Service
Hiroshima, Japan January 15-January 19
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SAINT-W.2007.802007 International Symposium on Appli ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Hisashi Naito, Nagoya University, Japan
Shoji Kajita, Nagoya University, Japan
Yasushi Hirano, Nagoya University, Japan
Kenji Mase, Nagoya University, Japan
The Central Authentication Service (CAS) is a middleware for constructing a Single Sign On infrastructure for Web applications and has been developed by JA-SIG. In this paper, we investigate a multiple-tiered security hierarchy infrastructure for Web applications, by extending CAS to the Central Authentication and Authorization Service (CAS^2). Since the new version of CAS (CAS3) supports the X.509 client certificate authentication, we use it as leverage to realize our multiple-tiered security hierarchy mechanism. As a result, CAS^2 uses X.509 client certification for not only authentication, but also authorization.
Citation:
Hisashi Naito, Shoji Kajita, Yasushi Hirano, Kenji Mase, "Multiple-Tiered Security Hierarchy for Web Applications Using Central Authentication and Authorization Service," saint-w, pp.27, 2007 International Symposium on Applications and the Internet Workshops (SAINTW'07), 2007
Usage of this product signifies your acceptance of the Terms of Use.