SecurityHome < IVOA

IVOA Web>IvoaGridAndWebServices>SecurityHome (2022-01-04, PatrickDowler) (raw view)

---+ <nop>IVOA Grid & Web Services: Security

__Contents__ 
%TOC%

---

---++ Overview

Though our data may have zero commercial value (according to Jim Gray), we are still concerned about who can access them and ensuring that they and the services that we provide are not exploited for nefarious purposes. However, users don't care about protocols and standards - they care about better experience with enhanced privacy and security. We require simple to use, robust, and scalable solutions to the issues of authentication (who am I), authorization (what can I do) and delegation (how do I allow someone else to do something on my behalf) that work with all kinds of services and applications that the VO offers.

   * [[Authentication_SSO][Authentication]]
   * [[Authorization][Authorization]]
   * [[CredentialDelegation][Credential Delegation]]
<span style="background-color: #f6f6f6; color: #630000; font-size: 18.85px;">Access control</span>

The ability to control who has access to resources and what operations are permitted is a common task across the IVOA.

Prototype work on using HTTP headers to convey authentication: [[SSO_next][SSO_next]]
---+++ Specification

   * [[http://wiki.ivoa.net/internal/IVOA/IvoaGridAndWebServices/AccessControlInterface.pdf][Access Control Interface v0.1]]
<!--
      * Set ALLOWTOPICRENAME = IVOA.TWikiAdminGroup
-->

Topic revision: r8 - 2022-01-04 - PatrickDowler

IVOA

Log in or Register

IVOA.net
Wiki Home
WebChanges
WebTopicList
WebStatistics

Twiki Meta & Help
IVOA
Know
Main
Sandbox
TWiki

TWiki intro
TWiki tutorial
User registration
Notify me

Working Groups

Interest Groups

Time Domain

Committees

Stds&Procs

www.ivoa.net
Documents
Events
Members
XML Schema