2008
A federated framework for secure videoconference
PROCHÁZKA, Michal a Daniel KOUŘILZákladní údaje
Originální název
A federated framework for secure videoconference
Autoři
Vydání
Stockholm, Sweden, 2008
Nakladatel
Terena EuroCamp
Další údaje
Typ výsledku
Audiovizuální tvorba
Utajení
není předmětem státního či obchodního tajemství
Organizační jednotka
Ústav výpočetní techniky
Klíčová slova anglicky
Federation; videoconference; authentication; authorization; online ca
Příznaky
Mezinárodní význam
Změněno: 14. 5. 2008 16:50, RNDr. Michal Procházka, Ph.D.
Anotace
V originále
In this talk we will present our ongoing work in the field of secure collaboration systems, which is aimed at utilization of the identity federation schema. In order to provide users with a secure mechanism to setup a videoconferencing system, we supply them with a VPN infrastructure that allows to encapsulate the application protocol. Authentication to the VPN server is based on clients' digital certificates that are issued by a federated CA. The certificates also bear SAML assertions that can be used by the VPN to make access control decisions and, e.g., define sets of users based on the attributes assigned to the users. We are also finishing a client tool for MS Windows that provide a GUI for management of certificates issued by a federated CA. Using these tools we provide an easy yet secure access to the VPN server, since the authentication is done by the VPN transparently. The infrastructure could be used to secure other protocols as well (SIP).