[Peertrust-discuss] Bringing SAML to Trust Negotiation

[<co...@ya...>]

Hi,

PeerTrust uses an Automatic Trust Negotiation (ATN) to
establish trust if sensitive data have to be
exchanged.
Peers usually do not hold all necessary security
information locally.  Therefore they need to access
external security information during ATN.

This is where the Security Markup Language helps. It
provides indeed an XML framework to exchange security
information.

The objective of my project is to integrate SAML
functionalities in PeerTrust. This will e.g. enable
peers to communicate with a larger range of security
authorities (Provided SAML becomes widespread!). The
development is based on OpenSAML, which provides some
APIs to perform SAML interactions transparently from
Java. 
Status of the project:
I have done some explorative prototypes.
Now the task is to build the "final integration", i.e.
providing an Interface to translate PeerTrust specific
security request in an SAML request and to translate
back a SAML assertion into a PeerTrust specific
security answer.

Best regards,

Patrice Congo



	

	
		
___________________________________________________________
Gesendet von Yahoo! Mail - Jetzt mit 100MB Speicher kostenlos - Hier anmelden: http://mail.yahoo.de