Estudo da Extensão de Métodos de Autenticação em um Middleware de Nuvens Híbridas

• Renan Dembogurski UFJF
• Antônio Tadeu LNCC
• Bruno José Dembogurski UFRRJ
• Edelberto Franco UFJF

DOI: https://doi.org/10.5753/sbseg_estendido.2018.4148

Abstract

Cloud computing has attracted the attention of research, teaching institutions and the market in recent years. Within this context, Cloud Federations, which, in the large area of Identity and Access Management (IAM), have as their main role providing the necessary infrastructure for the application of this technology. Thus, the objective of this work is to present the challenges and experiences of developing, implementing and validating the Identity Management (GId) model whose main solution is to integrate the authentication methods for OpenID Connect (OIDC) with the middleware of the Identity Management project for the Cloud Computing Innovation Center (CICN), Fogbow.

References

Alfieri, R., Cecchini, R., Ciaschini, V., dell’Agnello, L., Gianoli, A., Spataro, F., Bonnassieux, F., Broadfoot, P. J., Lowe, G., Cornwall, L., Jensen, J., Kelsey, D. P., Frohner, Á., Groep, D. L., de Cerff, W. S., Steenbakkers, M., Venekamp, G., Kouril, D., McNab, A., Mulmo, O., Silander, M., Hahkala, J., and Lörentey, K. (2003). Managing dynamic user communities in a grid of autonomous resources. CoRR, cs.DC/0306004.

Amazon EC2 (2018). Amazon Web Services. Disponível em [link]. Acessado em: 06/09/2018.

Apache CloudStack (2017). The Apache Software Foundation. Disponível em [link]. Acessado em: 06/09/2018.

CICN Project (2018a). Fogbow. Disponível em [link]. Acessado em: 06/09/2018.

CICN Project (2018b). Fogbow behavioral plugins. Disponível em [link]. Acessado em: 06/09/2018.

CICN Project (2018c). Fogbow manager configuration. Disponível em [link]. Acessado em: 06/09/2018.

Hardt, D. (2012). The oauth 2.0 authorization framework. Disponível em [link]. Acessado em: 06/09/2018.

IETF, O. W. G. (2018). Oauth. Disponível em [link]. Acessado em: 06/09/2018.

IETF OAuth Working Group (2018). Oauth2. Disponível em [link]. Acessado em: 06/09/2018.

Microsoft (2018). Microsoft azure. Disponível em [link]. Acessado em: 06/09/2018.

OASIS (2018). Security Assertion Markup Language - SAML. Disponível em [link]. Acessado em: 06/09/2018.

OpenID Connect (2018). OIDF The OpenID Foundation. Disponível em [link]. Acessado em: 06/09/2018.

OpenNebula (2018). OpenNebula Project. Disponível em [link]. Acessado em: 06/09/2018.

OpenStack (2018). OpenStack Foundation. Disponível em [link]. Acessado em: 06/09/2018.

Pearlman, L., Welch, V., Foster, I., Kesselman, C., and Tuecke, S. (2002). A community authorization service for group collaboration. In Policies for Distributed Systems and Networks, 2002. Proceedings. Third International Workshop on, pages 50–59.

Recordon, D. and Reed, D. (2006). Openid 2.0: A platform for user-centric identity management. In Proceedings of the Second ACM Workshop on Digital Identity Management, DIM ’06, pages 11–16, New York, NY, USA. ACM.

Rescorla, E. and Schiffman, A. (2018). The secure hypertext transfer protocol. Disponível em [link]. Acessado em: 06/09/2018.

Silva, E. F., Muchaluat-Saade, D. C., and Fernandes, N. C. (2018). Across: A generic framework for attribute-based access control with distributed policies for virtual organizations. Future Generation Computer Systems, 78:1 – 17.

Toosi, A. N., Calheiros, R. N., and Buyya, R. (2014). Interconnected cloud computing environments: Challenges, taxonomy, and survey. ACM Comput. Surv., 47(1):7:1–7:47.

Wangham, M., Mello, E., Böger, D., Gurios, M., and Fraga, J. (2010). Gerenciamento de identidades federadas. In Porto, L., editor, Livro de Minicursos do SBSEG. SBC.