FAME: Adding multi-level authentication to Shibboleth

Aleksandra Nenadic; Ning Zhang; Jay Chin; Carole Goble

doi:10.1109/E-SCIENCE.2006.261044

FAME: Adding multi-level authentication to Shibboleth

Aleksandra Nenadic, Ning Zhang, Jay Chin, Carole Goble

Research output: Chapter in Book/Conference proceeding › Conference contribution › peer-review

Abstract

The paper describes the design of FAME (Flexible Access Middleware Extension) architecture aimed at providing multi-level user authentication service for Shibboleth, which is endorsed by the Joint Information Systems Committee (JISC) as the next generation authentication and authorisation infrastructure for the UK Higher Education community. FAME derives authentication assurance level based upon the strength of the authentication token and protocol used by the user when authenticating and feeds it to the PERMIS authorisation decision engine via Shibboleth to enable more fine-grained access control. In this way, access to resources is controlled according to the strength of the authentication method so that more sensitive resources may require users to identify themselves using a higher level of authentication. © 2006 IEEE.

Original language	English
Title of host publication	e-Science 2006 - Second IEEE International Conference on e-Science and Grid Computing\|e-science 2nd IEEE int. Conf. e-Science Grid Comput.
Place of Publication	Washington, DC, USA
Publisher	IEEE Computer Society
ISBN (Print)	0769527345, 9780769527345
DOIs	https://doi.org/10.1109/E-SCIENCE.2006.261044
Publication status	Published - 2006
Event	e-Science 2006 - 2nd IEEE International Conference on e-Science and Grid Computing - Amsterdam Duration: 1 Jul 2006 → …

Conference

Conference	e-Science 2006 - 2nd IEEE International Conference on e-Science and Grid Computing
City	Amsterdam
Period	1/07/06 → …

Access to Document

10.1109/E-SCIENCE.2006.261044

Cite this

@inproceedings{931a62653ac544659fb375db5f53fd61,

title = "FAME: Adding multi-level authentication to Shibboleth",

abstract = "The paper describes the design of FAME (Flexible Access Middleware Extension) architecture aimed at providing multi-level user authentication service for Shibboleth, which is endorsed by the Joint Information Systems Committee (JISC) as the next generation authentication and authorisation infrastructure for the UK Higher Education community. FAME derives authentication assurance level based upon the strength of the authentication token and protocol used by the user when authenticating and feeds it to the PERMIS authorisation decision engine via Shibboleth to enable more fine-grained access control. In this way, access to resources is controlled according to the strength of the authentication method so that more sensitive resources may require users to identify themselves using a higher level of authentication. {\textcopyright} 2006 IEEE.",

author = "Aleksandra Nenadic and Ning Zhang and Jay Chin and Carole Goble",

year = "2006",

doi = "10.1109/E-SCIENCE.2006.261044",

language = "English",

isbn = "0769527345",

booktitle = "e-Science 2006 - Second IEEE International Conference on e-Science and Grid Computing|e-science 2nd IEEE int. Conf. e-Science Grid Comput.",

publisher = "IEEE Computer Society ",

address = "United States",

note = "e-Science 2006 - 2nd IEEE International Conference on e-Science and Grid Computing ; Conference date: 01-07-2006",

}

Nenadic, A, Zhang, N, Chin, J & Goble, C 2006, FAME: Adding multi-level authentication to Shibboleth. in e-Science 2006 - Second IEEE International Conference on e-Science and Grid Computing|e-science 2nd IEEE int. Conf. e-Science Grid Comput.. IEEE Computer Society , Washington, DC, USA, e-Science 2006 - 2nd IEEE International Conference on e-Science and Grid Computing, Amsterdam, 1/07/06. https://doi.org/10.1109/E-SCIENCE.2006.261044

FAME: Adding multi-level authentication to Shibboleth. / Nenadic, Aleksandra; Zhang, Ning; Chin, Jay et al.
e-Science 2006 - Second IEEE International Conference on e-Science and Grid Computing|e-science 2nd IEEE int. Conf. e-Science Grid Comput.. Washington, DC, USA: IEEE Computer Society , 2006.

Research output: Chapter in Book/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - FAME: Adding multi-level authentication to Shibboleth

AU - Nenadic, Aleksandra

AU - Zhang, Ning

AU - Chin, Jay

AU - Goble, Carole

PY - 2006

Y1 - 2006

N2 - The paper describes the design of FAME (Flexible Access Middleware Extension) architecture aimed at providing multi-level user authentication service for Shibboleth, which is endorsed by the Joint Information Systems Committee (JISC) as the next generation authentication and authorisation infrastructure for the UK Higher Education community. FAME derives authentication assurance level based upon the strength of the authentication token and protocol used by the user when authenticating and feeds it to the PERMIS authorisation decision engine via Shibboleth to enable more fine-grained access control. In this way, access to resources is controlled according to the strength of the authentication method so that more sensitive resources may require users to identify themselves using a higher level of authentication. © 2006 IEEE.

AB - The paper describes the design of FAME (Flexible Access Middleware Extension) architecture aimed at providing multi-level user authentication service for Shibboleth, which is endorsed by the Joint Information Systems Committee (JISC) as the next generation authentication and authorisation infrastructure for the UK Higher Education community. FAME derives authentication assurance level based upon the strength of the authentication token and protocol used by the user when authenticating and feeds it to the PERMIS authorisation decision engine via Shibboleth to enable more fine-grained access control. In this way, access to resources is controlled according to the strength of the authentication method so that more sensitive resources may require users to identify themselves using a higher level of authentication. © 2006 IEEE.

U2 - 10.1109/E-SCIENCE.2006.261044

DO - 10.1109/E-SCIENCE.2006.261044

M3 - Conference contribution

SN - 0769527345

SN - 9780769527345

BT - e-Science 2006 - Second IEEE International Conference on e-Science and Grid Computing|e-science 2nd IEEE int. Conf. e-Science Grid Comput.

PB - IEEE Computer Society

CY - Washington, DC, USA

T2 - e-Science 2006 - 2nd IEEE International Conference on e-Science and Grid Computing

Y2 - 1 July 2006

ER -

FAME: Adding multi-level authentication to Shibboleth

Abstract

Conference

Access to Document

Fingerprint

Cite this