EnglishDelegated authorization protocols have become wide-spread to implement Web applications and services, where some popular providers managing people identity information and personal data allow their users to delegate third party Web services to access their data. In this paper, we analyze the risks related to untrusted providers not behaving correctly, and we solve this problem by proposing the first verifiable delegated authorization protocol that allows third party services to verify the correctness of users data returned by the provider. The contribution of the paper is twofold: we show how delegated authorization can be cryptographically enforced through authenticated data structures protocols, we extend the standard OAuth2 protocol by supporting efficient and verifiable delegated authorization including database updates and privileges revocation.
| Data di pubblicazione: | 2017 |
| Titolo: | Verifiable Delegated Authorization for User-Centric Architectures and an OAuth2 Implementation |
| Autore/i: | Ferretti, Luca; Marchetti, Mirco; Colajanni, Michele |
| Autore/i UNIMORE: | |
| Digital Object Identifier (DOI): | 10.1109/COMPSAC.2017.260 |
| Nome del convegno: | 41st IEEE Annual Computer Software and Applications Conference Workshops, COMPSAC 2017 |
| Luogo del convegno: | ita |
| Data del convegno: | 2017 |
| Rivista: | PROCEEDINGS - INTERNATIONAL COMPUTER SOFTWARE & APPLICATIONS CONFERENCE |
| Volume: | 2 |
| Pagina iniziale: | 718 |
| Pagina finale: | 723 |
| Citazione: | Verifiable Delegated Authorization for User-Centric Architectures and an OAuth2 Implementation / Ferretti, Luca; Marchetti, Mirco; Colajanni, Michele. - 2(2017), pp. 718-723. ((Intervento presentato al convegno 41st IEEE Annual Computer Software and Applications Conference Workshops, COMPSAC 2017 tenutosi a ita nel 2017. |
| Tipologia | Relazione in Atti di Convegno |
File in questo prodotto:
| File | Descrizione | Tipologia | |
|---|---|---|---|
| main.pdf | Articolo principale | Post-print | Open Access Visualizza/Apri |
http://hdl.handle.net/11380/1149171
I documenti presenti in Iris Unimore sono rilasciati con licenza Creative Commons Attribuzione - Non commerciale - Non opere derivate 3.0 Italia, salvo diversa indicazione.
In caso di violazione di copyright, contattare Supporto Iris
Copyright © 2019