We describe a formal approach to the analysis of security aspects of an identity federation protocol for web services in convergent networks. This network protocol was proposed by Telecom Italia as a solution to allow end users to access services on the web through different access networks without explicitly providing any credentials, while the service providers can trust the user's identity information provided by the access networks and access some user data. As a first step towards a fullblown formal security analysis of the protocol, we specify three user scenarios in the process algebra Crypto-CCS and verify the vulnerability of one of these specifications w.r.t. a man-in-themiddle attack with the model checker PaMoChSA.
Towards security analyses of an identity federation protocol for Web services in convergent networks
Petrocchi M;Ter Beek M;
2007-01-01
Abstract
We describe a formal approach to the analysis of security aspects of an identity federation protocol for web services in convergent networks. This network protocol was proposed by Telecom Italia as a solution to allow end users to access services on the web through different access networks without explicitly providing any credentials, while the service providers can trust the user's identity information provided by the access networks and access some user data. As a first step towards a fullblown formal security analysis of the protocol, we specify three user scenarios in the process algebra Crypto-CCS and verify the vulnerability of one of these specifications w.r.t. a man-in-themiddle attack with the model checker PaMoChSA.File | Dimensione | Formato | |
---|---|---|---|
prod_173847-doc_79508.pdf
solo utenti autorizzati
Descrizione: Towards security analyses of an identity federation protocol for Web services in convergent networks
Tipologia:
Versione Editoriale (PDF)
Dimensione
571.99 kB
Formato
Adobe PDF
|
571.99 kB | Adobe PDF | Visualizza/Apri Richiedi una copia |
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.