2007 International Symposium on Applications and the Internet Workshops (SAINTW'07)
Multiple-Tiered Security Hierarchy for Web Applications Using Central Authentication and Authorization Service
Hiroshima, Japan
January 15-January 19
ISBN: 0-7695-2757-4
The Central Authentication Service (CAS) is a middleware for constructing a Single Sign On infrastructure for Web applications and has been developed by JA-SIG. In this paper, we investigate a multiple-tiered security hierarchy infrastructure for Web applications, by extending CAS to the Central Authentication and Authorization Service (CAS^2). Since the new version of CAS (CAS3) supports the X.509 client certificate authentication, we use it as leverage to realize our multiple-tiered security hierarchy mechanism. As a result, CAS^2 uses X.509 client certification for not only authentication, but also authorization.
Citation:
Hisashi Naito, Shoji Kajita, Yasushi Hirano, Kenji Mase, "Multiple-Tiered Security Hierarchy for Web Applications Using Central Authentication and Authorization Service," saint-w, pp.27, 2007 International Symposium on Applications and the Internet Workshops (SAINTW'07), 2007