Negotiation based on individualization: Incorporating personalization into federation

Javed I. Khan, Kailas B. Bobade, Manas S. Hardas · 2007

In virtual business place, organizations store information of its members. Federated access control systems such as Shibboleth, active directory federation service allow virtual organizations to share their member's information. Based on this information, members enjoy seamless access to federated resources. However in this federated world, a member's information is divulged by her home organization. The member has little say in it. We have presented an extension to this work where members can personalize their own attribute release policy. As opposed to simple request reply based communication, such personalization inherently necessitates a mechanism of negotiation. To facilitate such personalization, we have presented negotiation enabled framework in federation. In this paper, we provide an extension to this framework to facilitate selection of negotiation flavor on per-need-basis. This is supported by negotiation protocol which defines the ordering of the messages and unique message structure that carries negotiation information.

Read the paper · More papers on PaperTik