Presentation 2008-12-17
Access management method for Least Privilege implementation By the identity federation cross-organizations
Takahito Motojima, Satoshi Ono,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) As for the business infomation system, service construction is performed again between the organizations which used SaaS. Therefore compliance is found and must maintain the authority that the subject accessing a resource accepted "Need-to-Know" even if I go over the wall of the organization. I suggest an access control system to realize Need-to-Know by I do Mash-Up in the service user side in this article, and controlling indication. By this method, it is characteristic of it that the other hierarchies do not have an influence by implementing Dependency Injection (DI) in the mash up layer.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) SaaS / Access management / Identity federation / Least Privilege / Mash-Up
Paper # ISEC2008-91
Date of Issue

Conference Information
Committee ISEC
Conference Date 2008/12/10(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Access management method for Least Privilege implementation By the identity federation cross-organizations
Sub Title (in English)
Keyword(1) SaaS
Keyword(2) Access management
Keyword(3) Identity federation
Keyword(4) Least Privilege
Keyword(5) Mash-Up
1st Author's Name Takahito Motojima
1st Author's Affiliation Informatics, Kogakuin University Graduate School()
2nd Author's Name Satoshi Ono
2nd Author's Affiliation Faculty of Informatics Kogakuin University
Date 2008-12-17
Paper # ISEC2008-91
Volume (vol) vol.108
Number (no) 355
Page pp.pp.-
#Pages 4
Date of Issue