Data Exchange Platform Based on Trust and Authorization System

LUO Changhang,HU Liyong,OUYANG Jin,ZHANG Weiguo

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.23.050

2005-01-01

Abstract:With the development of Internet,a unitive secure platform of data exchange becomes very important at the Internet environment.A secure and flexible data exchange system based on SAML is presented,in which PKI and XML techniques are applied.

What problem does this paper attempt to address?

FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

Xiao-ning JIANG,Cheng-qing YE,Xue-zeng PAN

2001-01-01

Journal of Computer Research and Development

Abstract:Electronic commerce is a main trend in Internet applications, which should be based on fair exchange. A new fair exchange protocol with off-line semi-trusted third party is proposed. It is also efficient in the sense that it only needs 4 messages in a transaction. In the meantime all messages are encrypted naturally, which makes it appealing over large open networks that have little or no physical security, such as Internet. It is based on publicly verifiable secret sharing (PVSS) theory.
Design and Implementation of Unified Access Control System Based on LDAP

ZHENG Lan,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.07.058

2005-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale, the use of directories as accessible repositories providesa flexible and various solution for gathering, storage and accessing information. The design and implementation of an unified accesscontrol system supporting single-sign-on areintrodueed, whichis based on LDAPdirectory and combines access controls ofall applicationsystems to realize security access system of unified users management. The system used middleware technology to efficiently resolvethe bottleneck problem when a lot of users accesed LDAP database.
Secure Information Exchange Model Between PDM Systems

刘端阳,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2004.01.006

2004-01-01

Abstract:With the development of collaboration among enterprises, it is very desirable to securely exchange information between PDMs through Internet. The original user/password mechanism is very weak, unsecure and inflexible. And also,authorization based on PKC(public key certificate) cannot satisfy the temporary relations between enterprises. In order to satisfy the demand of secure information exchanges between enterprises, according with the genernal security management model of PDM system, This paper designed an AC(attribute certificate) model based on PKC. The model was based on TTP architecture to achieve trust between enterprises and automation of enterprises' collaboration, and reduced the startup cost. And it provides not only reliable authentication and data protection, but also flexible access control and secure audit, and effectively implements information exchanges between enterprises. The new model can be well used in the fields of automobile manufacture,electronics,mechanics and so on.
Construction of security architecture of web services based EAI

Di Wu,Yabo Dong,Jian Lin,Miaoliang Zhu

DOI: https://doi.org/10.1007/11563952_52

2005-01-01

Abstract:The fast development of E-Commerce and information technology brings much higher requirements for enterprise informationization. Because of the differences in platforms, development languages and standards etc, enterprise application integration (EAI) has become the important form of enterprise informationization to support complex business processes. Web services have emerged as the next generation of integration technology which provides the power to support interoperability. However EAI doesn’t just present new interoperability challenges; it also presents serious privacy and security challenges. This paper presents security architecture of Web Services based EAI which uses distributed Single Sign On authentication and distributed Role-based Access Control authorization. The basic concept and prototype system of the security architecture are described in detail.
Design and development of a clinical data exchange system based on ensemble integration platform

Wang Yu,Guo Long,Tian Yu,Jingsong Li

DOI: https://doi.org/10.1007/978-94-007-7618-0_37

2014-01-01

Abstract:With the pace of China's New Medical Reform, medical information systems have been rapidly developing, thus generating tremendous clinical data that contain large amount of information. Clinical data exchange is one of the most important foundations to make full use of clinical data. Under the whole background of Global Dolphin (an international data exchange system between China and Japan), this paper demonstrates a method of achieving standardized clinical data exchange based on Ensemble Integration Platform and using Health Level Seven International (HL7) as the data exchange standard. HL7 helps to standardize the data exchange process; Ensemble Platform contributes to the loose coupling of medical information systems and constructing a unified data management layer in logic, ultimately achieving the goal of sharing clinical data between a data center and medical institutions. ? Springer Science+Business Media Dordrecht 2014.
A New SIP SSO Mechanism

高俊娜,于继万,朱华飞,潘雪增

2004-01-01

Abstract:In current SIP protocol,to interact with other domain services,a node need multi-authentication processes. This paper integrates SAML into SIP protocol which well extends SIP authentication mechanism between multi-domains. It makes full use of SAML capability based on XML to bring an easy method to implement single sign-on(SSO).
XML Based Exchange and Integration Techniques of Heterogeneous Data with Implementation

谢芳华,任午令,唐任仲

DOI: https://doi.org/10.3969/j.issn.1009-0134.2004.04.001

2004-01-01

Abstract:An XML technique based data exchange model was proposed, with using XML documentsas the base of data communication carrier, the information communication platform underInternet/Intranet environment was established and the software component was developed,which provides an effective low-cost method and tool to integrate and share different formatdata between heterogeneous databases. The method and tool has been applied to thedata integration and exchange of a supply chain management system.
The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

PENG Jie,GUO Shan-Qing,MAO Bing,XIE Li

DOI: https://doi.org/10.3969/j.issn.1002-137X.2005.05.013

2005-01-01

Computer Science

Abstract:In this paper, we analyze the problems exposed by the current security management systems, and intro- duce the trust mechanism to XML-based security management platform. In the traditional trust model, the trust sub- kect is unitary, which can not meet the requirements raised by the XML-based security management to trust. In order to solve this problem, some necessary improvements are made to the traditional trust model. First, the bidirectional trust is proposed, resolving the mutual trust problem of the server and client. Second, a local trust library is added to enhance both the administrator's global analysis and the assessment of reputation-based trust degree.
DESC: Enabling Secure Data Exchange Based on Smart Contracts.

Jiao Liang,Weili Han,Zeqing Guo,Yaoliang Chen,Chang Cao,Xiaoyang Sean Wang,Fenghua Li

DOI: https://doi.org/10.1007/s11432-017-9245-1

2018-01-01

Science China Information Sciences

Abstract:>Dear editor,As data are one of the most important factors of today’s intelligent systems but are relatively scarce,people try exchanging data with other organizations or public marketplaces.However,data exchange is now lack of a secure execution mecha-
Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

He,Wei,Li,Xiu,Liu,Wenhuang

DOI: https://doi.org/10.3969/j.issn.1008-0570.2005.33.001

2005-01-01

Abstract:This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user's id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.
Design and Implementation of New Data Exchange for Digital Campus

Zhao wei,Lv ShuBo,Wang ZhiHua,Zhou Bing

DOI: https://doi.org/10.3969/j.issn.1671-4598.2013.09.058

2013-01-01

Abstract:To meet the business demand of the data exchange and synchronization among heterogeneous database for Digital Campus,the paper presents a project solution based on XML and message-Oriented Middleware design and realization,by the using of XML as the middle data in data exchange and using of message-Oriented Middleware as the bridge in data transfer,the solution exchange data based on the adapter and the Core Conversion System。thus,the solution can shield the heterogeneous database,also solve data security and data confliction during data exchange。Finally,the solution is validated by practical application and can improve the performance of data exchange。
DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

安南,张申生

2002-01-01

Abstract:This paper designed and implemented a secure framework that provides XML signature function, XML element-wise encryption function, smart card based crypto API library and Public Key Infrastructure (PKI) security functions to achieve confidentiality, integrity, message authentication, and/or signer authentication services for XML documents and existing non-XML documents that are exchanged by Internet for e-commerce application.
Identity of Shibboleth-based multi-resource on online experimental platform

Yu Zhang,Huimei Lu,Yong Xiang

DOI: https://doi.org/10.3969/j.issn.1001-3695.2017.03.061

2017-01-01

Abstract:Federated identity was applied to achieve single-sign-on for the situation in which users were from different organizations.However,the diversity of resources brought about trouble of management.To solve the problem,this paper selected Shibboleth as a method of federated identity.System in federation provided REST API of their own resources,and released the authorization code which identified the access rights of resource by the attribute publishing policy in Shibboleth,thus it accessed multi-resouce by users from different organazations after unified authentication.Taking online experimental platform based on OpenEdX as an example,it implemented unified authentication and authorization of complex resources.It applied Shibboleth to authenticate users,coupled with REST API and authorization code,and it shared complex resources during several systems.Moreover,it developed some XBlocks on OpenEdX to share data with other systems.
A Design Scheme of Enterprise Secure Communication Platform

王秀琴,华蓓

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.02.043

2001-01-01

Abstract:By the theory of public key infrastructure PKI and theauthentication structure of electronic transaction system, this paper puts forward a design scheme of enterprise security communication platform based on certificate authority (CA), gives a model and analyses the system's security in detail.
A Fair-Exchange Protocol Based On Off-Line Semi-Trusted Third Party

Wu Qingtao,Zhang Hongyi,Pu Jiexin

DOI: https://doi.org/10.3778/j.issn.1002-8331.2009.35.027

2007-01-01

Abstract:The fairness of data exchange becomes a key factor for the transaction over the Internet. To ensure the fairness of data exchange, the protocol needs a trusted third party be a judge when the dispute occurs, and has to give a guarantee to main parties during the data exchange. To eliminate the third party's connectional time and enhance its security, a fair-exchange protocol based on off-line semi-trusted third party has presented in this paper. The protocol employs an off-line semi-trusted third party, where a flexible method for selecting a semi-trusted third party is proposed. Also, the proposed protocol is extended to Web services so that it can be used for main parties in different platforms.
UNIFIED IDENTITY APPLICATION SYSTEM BASED ON LDAP AND STRUTS

Li Tao,Zhang Bo,Zhang Xiaopeng,Lu Haitao,Zhong Zhuorong,Li Ximing,Wu Lili,Huang Zhihong

2008-01-01

Abstract:Digital campus is an important part for the informationalization of education.LDAP is widely applied to digital campus unified identity authentication.Lightweight directory access protocol LDAP and Java Web development technology are discussed.A Unified identity application system in digital campus is designed and implemented.By this system,one can apply for mail accounts or internet visitation accounts through campus portal.Experiment shows that this system has the merits of advantageous transplantation,appropriate expansion and superior security.
Research on heterogeneous data exchange platform based on JMS and XML

QIAN Yong,TAN Xian-hai

DOI: https://doi.org/10.3969/j.issn.1005-8451.2012.11.001

2012-01-01

Abstract:This article introduced a kind of data exchange program based on JMS and XML.The System which was developed by the program achieved reliable capability of data exchange,and a good cross-platform versatility.The program provided an effective solution for heterogeneous data exchange.
Analysis of single-signon system based on SAML artifact technology

Ke CHEN,Kun SHE,Di-ming HUANG

2005-01-01

Journal of Computer Applications

Abstract:Single-signon technology enables users to use multiple Web services without repetitious login which makes user identity management more convenient and secure.SAML is the criterion to implement a single-signon system.It provides a standard for Web services to exchange user identity authentication information.The implementation of SAML artifact technology in single-signon system was mainly discussed.The flow and security of this single-signon system was analyzed.
Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation

Sunan Shen,Shaohua Tang

DOI: https://doi.org/10.1109/CIS.2008.185

2008-01-01

Abstract:As grid’s dynamic, distributed and open nature, the issue of mutual trust among grid entities is challenging, not only because of the entities in different domains, but also because the fact that those domains may deploy different security mechanisms. A federal authentication and authorization scheme based upon trust management and delegation is proposed. Different security domains can join in the federation through the interface that our approach provides. The establishment of trust relationship among domains is based on trust negotiation and PKI cross-certification. We make authorization relay on dynamic role translation and on delegation. The Security Assertion Markup Language (SAML) is adopted by exploiting its AttributeStatement to create Delegation Assertion for grid.
Data Trust:A Trustworthy Data Transaction Model

HUANG Jinglei,LI Jinpu,TANG Ke

DOI: https://doi.org/10.11959/j.issn.2096-0271.2023016

IF: 3.3

2023-01-01

Big Data Research

Abstract:Data trust is regarded as a new and credible data transaction model. Data trust is not only an organizational structure to guarantee information security, but also an innovative institutional design to enhance the trustworthiness of data factor market. A data trust operation mechanism was designed, and the organizational structure, characteristics, functions, and regulatory scheme of the data trust under this mechanism were discussed. That data trust contained two independent legal relationships were pointed out. Its most important feature was the risk segregation among participants, which was the basis of data trust as a credible data transaction model. Data trusts could play an important function in the data value chain, specifically in terms of data value addition, data escrow, and data commons. Finally, the unique advantages of data trust based on the institutional guidelines of “20 measures to build basic systems for data” were demonstrated, and that personal data trust and public data trust were feasible practical paths was pointd out.

Data Exchange Platform Based on Trust and Authorization System

FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

Design and Implementation of Unified Access Control System Based on LDAP

Secure Information Exchange Model Between PDM Systems

Construction of security architecture of web services based EAI

Design and development of a clinical data exchange system based on ensemble integration platform

A New SIP SSO Mechanism

XML Based Exchange and Integration Techniques of Heterogeneous Data with Implementation

The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

DESC: Enabling Secure Data Exchange Based on Smart Contracts.

Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

Design and Implementation of New Data Exchange for Digital Campus

DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

Identity of Shibboleth-based multi-resource on online experimental platform

A Design Scheme of Enterprise Secure Communication Platform

A Fair-Exchange Protocol Based On Off-Line Semi-Trusted Third Party

UNIFIED IDENTITY APPLICATION SYSTEM BASED ON LDAP AND STRUTS

Research on heterogeneous data exchange platform based on JMS and XML

Analysis of single-signon system based on SAML artifact technology

Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation

Data Trust:A Trustworthy Data Transaction Model