Encryption Security

Size: px

Start display at page:

Download "Encryption Security"

みひなひろなが
4 years ago
Views:

1 XML Consortium WG

2 XML Signature XML Encryption XKMS2.0 X-KRSS:Register X-KISS:Locate X-KISS:Validate WS-Security XACML WG 2004/02/06 1

3 XML WG 2004/02/06 2

4 XKMS XML SAML SSO SAML XML XML Signature XML Encryption SAML WG 2004/02/06 3

5 XKMS 2.0 W3C:WD A XPath Filter 2.0 W3C: C WS-Security OASIS:CD XML Signature W3C: Exclusive XML C14n W3C: SAML 1.1 OASIS: SOAP XML Encryption W3C: D XACML OASIS: XACML 1.1 OASIS:CD Decryption Transform W3C: XML 2004/02/06 B Canonical XML W3C: WG 4

6 XML Signature XML Signature PKI XML Signature XML WG 2004/02/06 5

7 2004/02/06 WG 6

8 Enveloping Enveloped Detached <ds:signature> <ds:object> <myap:order/> </ds:object> </ds:signature > <myap:order> <ds:signature> </ds:signature > </myap:order> <myap:order> </myap:order> <ds:signature> </ds:signature > <Signature> WG 2004/02/06 7

9 XML Encryption XML Encryption XML Encryption XML WG 2004/02/06 8

10 2004/02/06 WG 9

11 XKMS 2.0 XML Key Management Specification XKMS PKI PKI 3 K-KRSS Registry X-KISS LocateValidate Web XML Signature <ds:keyinfo> WG 2004/02/06 10

12 X-KRSS:Register <Register> <Prototype> </Prototype> <AuthInfo> </AuthInfo> </Register> XKMS <RegisterResult> <KeyBinding> </KeyBinding> </RegisterResult> WG 2004/02/06 11

13 X-KISS:Locate XKMS <Locate> </Locate> X509 <LocateResult> <ds:keyvalue>rsa Key Value</ds:KeyValue> </LocateResult> X509 WG 2004/02/06 12

14 X-KISS:Validate XKMS <Validate> <ds:keyvalue>rsa Key Value</ds:KeyValue> </Validate> <ValidateResult> <Status>Valid</Status> <Interval> </Interval> </ValidateResult> WG 2004/02/06 13

15 WS-Security Security Web Service Security Web Web SOAP XML Signature XML Encryption WG 2004/02/06 14

16 SSL SSL:Point to Point HTTPS JFB HTTPS Card WS-Security:End to End WS-Security Security JFB Card WG 2004/02/06 15

17 Signature Encryption WS-Security: Card Signature/Encryption: Card WG 2004/02/06 16

18 XACML extensible Access Control Markup Language XACML Specifications OASIS Standard [18 Feb. 2003] Specification Document Policy Schema Context Schema WG 2004/02/06 17

19 XML Consortium WG

20 SAMLXML SAML SAML WG 2004/02/06 19

21 SAMLXML SAML SAML WG 2004/02/06 20

22 SAML Security Assertion Markup Language XML by Authentication Assertion by Attribute Assertion by Authorization Decision Assertion WWW SSO Cookie OASIS V1.1 OASIS Standard WG 2004/02/06 21

23 SAML Profile Authority Response Binding Assertion Requestor Request User SAML Assertion SAML Protocol SAML Binding SAML Profile WG 2004/02/06 22

24 SAML Protocol SAML Assertion Request/Response Authority SAML Protocol Request Assertion Query Response Assertion Assertion Requestor WG 2004/02/06 23

25 SAML Profile Web 2 Profile Web Browser SSO Profiles of SAML Browser/Artifact Profile of SAML Browser/POST Profile of SAML Profile SOAP Profile of SAML Cookie SAML Web WG 2004/02/06 24

26 SSO Pull Model Pull Model Pull 1 WG 2004/02/06 25

27 SSO Push Model Push Model Push 1 WG 2004/02/06 26

28 SSO 3rd Party Security Model 3rd Party Security Model WG 2004/02/

29 B2C SAML < > < > WG 2004/02/06 28

30 B2E K SAML > < ID=shimoda DB WG 2004/02/06 29

31 ASP ASP Content Store < > A ID+ ASP:Application Service Provider WG 2004/02/06 30

32 SAML 1000 WG 2004/02/06 31

33 SAMLXML SAML SAML WG 2004/02/06 32

34 World Cup Germany 1. XML Signature 2. XML Encryption 3. SAML WG 2004/02/06 33

35 BEGINNER PIZZA +Card No. +Card No. PIZZA WG 2004/02/06 34

36 BEGINNER PIZZA WG 2004/02/06 35

37 AP WG 2004/02/06 36

38 C#, Java opensaml, TSIK, Apache XML Security OS:Windows2000, WindowsXP, Linux PC, PDA, XML Signature, XML Encryption SAML XML XML Week WG 2004/02/06 37

40 OASISSAML WWW SAML1.1 SAML SAML SAML XML Liberty Alliance OpenSAML TSIK(Trust Service Integration Kit) WG 2004/02/06 39

セキュリティ関連XML規格の紹介

セキュリティ関連XML規格の紹介 XML 2002 6 10 XML WG SWG XML XML XML XML XML 2 XML 3 XML XML 4 2001 2002 7 8 9 10 11 12 1 2 3 4 5 6 XML V2 XML XML Web XACML SAML XKMS XML 5 XML 6 : ( ) ( ) : ) ( / ) XML 7 DoS XML 8 FW DIS DoS XML 9 XML