User and Machine Authentication and Authorization Infrastructure for Distributed Wireless Sensor Network Testbeds

Journal of Sensor and Actuator Networks

Markus Anwander²  Torsten Braun¹  Philipp Hurni²  Thomas Staub² 

[1] Institute of Computer Science and Applied Mathematics, Universität Bern, Neubrückstrasse 10, 3012 Bern, Switzerland;

关键词: authentication;    authorization;    wireless sensor networks;    experimentation;    testbeds;   

DOI  :  10.3390/jsan2010109

来源: mdpi

【 摘 要 】

The intention of an authentication and authorization infrastructure (AAI) is to simplify and unify access to different web resources. With a single login, a user can access web applications at multiple organizations. The Shibboleth authentication and authorization infrastructure is a standards-based, open source software package for web single sign-on (SSO) across or within organizational boundaries. It allows service providers to make fine-grained authorization decisions for individual access of protected online resources. The Shibboleth system is a widely used AAI, but only supports protection of browser-based web resources. We have implemented a Shibboleth AAI extension to protect web services using Simple Object Access Protocol (SOAP). Besides user authentication for browser-based web resources, this extension also provides user and machine authentication for web service-based resources. Although implemented for a Shibboleth AAI, the architecture can be easily adapted to other AAIs.

【 授权许可】

CC BY   
© 2013 by the authors; licensee MDPI, Basel, Switzerland.