Collaborative Role Management for Sharing Protected Web Resources

Abstract

In this paper we consider a security framework for sharing protected Web resources among independent organizations using groups and roles. Very important components of our model are a collaborative, distributive management of user membership in a group in one organization, resources management by the service provider and security enhancement. Each organization manages its own users and groups independently of others. User authentication and user authorization on a protected resource in one organization is determined by user group membership of other organizations. Collaboration is based on mutual trust, agreed upon common policies.