Integrando o Modelo de Segurança SPKI/SDSI ao Ambiente de Gerência WBEM

• Darlan Paulo Siqueira Carrião PUC-PR
• Altair Olivo Santin PUC-PR
• Carlos Alberto Maziero PUC-PR

DOI: https://doi.org/10.5753/sbseg.2004.21228

Abstract

This work presents the integration of the SDSI/SPKI authorization and authentication model to the standard of management WBEM considered for Distributed Management Task Force (DMTF). Through the integration proposal is offered to bigger portability and easiness in the administration of authorization policies. The chains of SPKI certifyd excuse to the authority use certifier centering the authentication. One searchs to show that the integration proposal would eliminate the necessity of the reliable inter-domains relation, guaranteeing in this way the interoperability between diverse WBEM servers. The implemented archetype showed to the effectiveness of the proposal in accesses objects CIM managed by the Internet in the test carried through.

References

A. Supervision of the CORBA Environment with SUMO: WBEM/CIM-Based Management Framework, CNES.

OpenWBEM Source, [online] disponível em URL: http://OpenWBEM.sourceforge.net, acesso julho de 2003.

Common Information Model (CIM) Specification,Version 2.6, Agosto, 2003, URL: http://ftp.dmtf.org/cim/cimdoc20.doc

DMTF LDAP Schema for the CIM v2.4 Core Information Model, [online], disponível: http://www.dmtf.org/spec/DEN/DSP0117.doc, Nov. 2000. Acesso em 01/03.

CIM User & Security Model, v2.5 disponível em [online]: http://www.dmtf.org/spec/CIM_Schema25/CIM_User25.mof. Acesso em 01/2003.

Specification for CIM Operations over HTTP, Ver. 1.0. [online], disponível: http://www.dmtf.org/download/spec/XMLs/CIMHTTPMapping10.php. Acesso em 12/2002.

Desktop Management Interface Especification, Version 2.0.1s, [online], disponivel: http://www.dmtf.org/download/spec/DMI/DMI.php. Acesso em 12/2002.

Interoperability Model White Paper, CIM Version 2.7. disponivel em http://www.dmtf.org/download/spec/CIM/DSP0465.DOC. Acesso em 12/2003.

SPKI Certicate Theory. Internet Engineering Task Force RFC 2693.

A simple Distributed Security Infrastructure. [online], disponivel em http://theory.lcs.mit.edu/~cis/SDSI.html. Acesso 03/2003.

A Summary of the X.500 User Schema for use with LDAPv3, RFC 2256.

Redes de confiança em sistemas de objetos CORBA, UFSC, 2003 disponível: http://www.das.ufsc.br/~emerson/mestrado.html#dissertacao. Acesso 03/2004.

Mello, E. R., Boesel, D. F, e Carrijo, L. F. Biblioteca parserSxxS. Relatório interno DAS/cadeias de confiança, julho de 2003. Disponível em, http://www.das.ufsc.br/seguranca/arquivos.html, acesso em março de 2004.

Windows Management Instrumentation: Background and Overview. Microsoft, Disponível em, http://www.microsoft.com\WMI, acesso em 02/2004.

Policy Core Information Mode. RFC3060l, IETF.

A Java implementation of Simple Distributed Security Infrastructure. Master's thesis, MIT.

RBPIM: A PCIM-Based Framework for RBAC, disponível: http://www.ppgia.pucpr.br/~jamhour/download/outros/artigos/RBPIMFinal.doc, acesso em março de 2004.

The Common Object Request Broker: Architecture and Specification, Editorial Revision: CORBA 2.4.2, OMG: Fevereiro 2001

S-expressions. [online], disponível em, http://theory.lcs.mit.edu/~rivest/sexp.html. Acesso em 06/2003.

The NIST Model for Role Based Access Control: Towards a Unified Standard, Proceedings, 5th ACM Workshop RBAC.

William - SNMP, SNMPv2, and CMIP, Addison-Wesley.

WBEM on Sun Developer's Guide, Palo Alto California.

WBEM Services. [online], disponivel em http://WBEMservices.sourceforge.net. Acesso em janeiro de 2003.

The Java Tutorial. [online], disponivel em http://java.sun.com/docs/books/tutorial/index.html.

SPKI-XML Certificate Structure. [online] Disponível em http://www.oasis-open.org/cover/xmlspki. html. Acesso em janeiro de 2003.

Lightweight Directory Access Protocol, RFC2251.