ppt

Size: px

Start display at page:

Download "ppt"

あつのつちかね
5 years ago
Views:

1 XML Liberty Alliance Project Liberty Alliance SIG Co-Chair NEC <gomi@az.jp.nec.com> 1 Liberty Alliance 2

2 Liberty Alliance Project Liberty Alliance Liberty 3 Liberty Alliance Project 4

3 Liberty Alliance Project 5 Liberty Alliance 6

4 Liberty Alliance 7 Liberty Alliance ID-FF ID-WSF: 8

5 Liberty Alliance SSO SSO B A IDP C 9 IDP: Identity Provider A Web IdP: A@idp SP2: A@sp2 A@sp1 SP1: 10

6 11 G A D C B F E H (IdP) ( ) SP CoT SLA 12 Liberty IdP SP URL XML Web HTTP IdP SP IdP SP SOAP IdP SP Web

7 Liberty Alliance ID-SIS (Service Interface Specifications) ID-FF (Federation Framework) SSO / SAML ID-WSF (Web Service Framework) Web Liberty Liberty (SAML, (SAML, SOAP, SOAP, WAP, WAP, WS-Security, WS-Security, XML-Sig, XML-Sig, XML-Enc, XML-Enc, SSL/TLS, SSL/TLS, etc.) etc.) SAML (Security Assertion Markup Language): OASIS XML 13 ID-FF (Identity Federation Framework) SSO IdP (Identity Provider A@idp IdP SP1 A@sp1 SP2 A@sp2 SP (Service Provider A IdP SP 14

8 IdP SP ID IdP xxx gomi abcd SP1 xxx pqrs SP2 hide1 hide2 15 SSO IdP SP XML IdP (3) (0) (5) SOAP (2) (6) (4) SOAP (4) (2 (1) SP (8) SP (7) ( 16

9 ID ( ) SAML (Security Assertion Markup Language) IdP SP SP (Assertion Statement), IdP SP 17 ID-FF IdP 18

10 ID-WSF IdP 0 Web (3) (2) (4) (1) (6) (7) AP Attribute Provider, (5) SP SP 19 ID-WSF ID-WSF Web IdP ID-FF SSO ID-WSF SOAP SASL (Simple Authentication & Security Layer) 20

11 ID-WSF: Discovery Service IdP DS: Discovery Service (1) DS SP SSO (3) (2) ( DS (4) SP 21 ID-WSF: Interaction Service WSP WSP WSP SP WSP SP WSP (1) (200,000 ) SP : WSP: (5) (2) 200,000 (7) (6) (3) (4) 20,000 20,000 SP 100,000 WSP: Web Service Provider 22

12 (ID-SIS: ID-Service Interface Specification Contact Book Presence Geo-Location 23 ID-FF ID-FF ID-FF 1.2 OASIS SAML ID-WSF ID-WSF ID-WSF ID-WSF 2.0 SAML ID-SIS

13 SAML Liberty ID-FF ID-WSF OASIS SAML 1.0 ( ) SAML 1.1 ( ) SAML 2.0 ( ) Liberty ID-FF 1.0 ( ) ID-FF 1.1 ( ) ID-FF 1.2 ( ) ID-WSF 1.0 ( ) ID-WSF 1.1 ( ) ID-WSF 2.0 ( ) 25 ID-WSF & WSS & STP & SAML ID-WSF SAML 1 STP 1.0 ID-WSF SOAP OASIS WSS (Web Services Security) ID-WSF WSS WSS 0.9 WSS 1.0 <Security> SAML SAML WSF 1.1 Token profile (WSS STP) WSF 1.0 WSF 2.0 SAML1.0 SAML1.1 SAML2.0

14 Liberty SAML ID-FF 1.0 SAML 1.0 SOAP ID-FF 1.2 ID-WSF 1.0 SAML 1.1 WS Security ID-WSF 2.0 SOAP Other Standards WS Security SAML 2.0 SOAP 27 28

15 Communicator Inc.(BtoB) 3500 Neustar (BtoB) Niteo partners (BtoB) JPMorgan, Wachovia, Bank of America Web GM, American Express, Sun (BtoE) 29 AOL Nokia Vodafone 30

16 EduMart (G(B)toC) Liberty NTT Liberty NTT Liberty JAL ONLINE 31 ID-WSF Authentication Service Discovery Service 32

17 EduMart SP SP SP IdP 24 * NICER : 33 JAL Online IdP ID NI Login NTT Single Single Sign-On Sign-On LA Protocol Web Service JAL JAL ONLINE ONLINE Federation Federation Login (Federation) Web Web JAL NI SP JMB# 34

18 SSO DVR T- DVR P2P ID ( :, PKI, ) DVR 35 ( : TV, ) Liberty 36

19 Liberty Liberty Notice Choice Principal Access to Personally Identifiable Information (PII) Quality Relevance Timeliness Complaint Resolution Security 37 Liberty Liberty Liberty Liberty 0) a) Notice b) Choice a) Notice 1) e) Relevance f) Timeliness 2) - (ID-FF) (ID-WSF) (Usage Directives, ID-WSF) - 3) d) Quality h) Security SSL/TLS Security Profiles(ID-WSF) 4) 0) 1) 5) a) Notice - 6) c) Principal Access to PII - 7) g) Complaint Resolution - 8)

Liberty Liberty Liberty URL http://www.projectliberty.org/about/enabledproducts.php SAML 2.

20 Liberty Liberty Liberty URL SAML NW LECP: Liberty Enabled Client and Proxy LUAD: Liberty User Agent Device Web PAOS SOAP Web 40

21 Principal Referencing ID Roaming Strong Authentication Provisioning iclient/robust Client CMS (Content Messaging Service) SMS (Short Messaging Service) MMS (Multimedia Messaging Service) Liberty Web 41 SIG RSA Conference Japan 5 HP World 7 10 Liberty Alliance 3 HP 3 42

22 43 Liberty Alliance Web Liberty Alliance Web HP Liberty Alliance Liberty Alliance Liberty Liberty 44

23 TEL: FAX Liberty Alliance Day in Japan 2005 Liberty Alliance SOX ID SAML Etc. 46

untitled

untitled WEB SAML 2.0 RSA 2005 SAML 2.0 2 1 3 Federated Identity The agreements, standards, and technologies that make identity and entitlements portable across autonomous domains. The Burton Group Web 4 2 Scope