We believe that a measured trustworthiness indicator or the so-called trust score of a given computing platform should be part of the authentication and authorization of that platform when it seeks access to services in the cloud.
It includes authentication of the parties, authorization to access the given resources, confidentiality of the communication, and the assurance of message integrity.
Using a cloud-oriented API derived from the mOSAIC project (http://www.mosaic-project.eu/), the authors built up an SLA-oriented cloud application that enables the management of security features related to user authentication and authorization of an IaaS Cloud Provider.
Instead, the deployment of Authentication, Authorization and Accounting (AAA) infrastructures has been preferred for that operation.
Furthermore, the application addresses the security concerns of authentication, authorization, and delegation, as well as an automated honest broker service for deidentifying data.
Access control makes use of authentication and authorization mechanisms in order to verify the identity of network entities and enforce distinct privilege levels for each.
Secure authentication and authorization of a remote healthcare professional is the main focus of this work.
This chapter discusses various methods of authentication and authorization, the differences between those two terms, and common attacks on some of the methods, especially passwords.
This scheme is to achieve the requirements of authentication and authorization.
In the presented architecture, authentication and authorization of a remote end-user is done by distributed smart e-health gateways to unburden the medical sensors from performing these tasks.
SAML 2.0 is one in a set of authentication and authorization technologies underlying Stanford WebLogin, which provides access by individuals across organizations to protected web pages and applications, with just one login action.
