Multiple-Tiered Security Hierarchy for Web Applications Using Central Authentication and Authorization Service

The Central Authentication Service (CAS) is a middleware for constructing a Single Sign On infrastructure for Web applications and has been developed by JA-SIG. In this paper, we investigate a multiple-tiered security hierarchy infrastructure for Web applications, by extending CAS to the Central Authentication and Authorization Service (CAS2 ). Since the new version of CAS (CAS3) supports the X.509 client certificate authentication, we use it as leverage to realize our multiple-tiered security hierarchy mechanism. As a result, CAS2 uses X.509 client certification for not only authentication, but also authorization.

• Type: Conference
• Year: 2007
• Where: SAINT
• Authors: Hisashi Naito, Shoji Kajita, Yasushi Hirano, Kenji Mase
• Keywords: Central Authentication, Central Authentication Service, Internet Technology, Multiple-tiered Security Hierarchy, SAINT 2007