[Fiware-wpa] On Security aspects and access control to FI-WARE GEs deployed on the FI-WARE Testbed

[BISSON Pascal]

Hi Juanjo,

Done now from my side.

Tuesday 25th seems indeed the best date to select.


Best Regards,
Pascal

PS: Not sure Daniel could fill in the poll so don't wait. If back he will join with me.

De : Juanjo Hierro [mailto:jhierro at tid.es]
Envoyé : mercredi 19 septembre 2012 16:09
À : Juanjo Hierro
Cc : BISSON Pascal; stefano.depanfilis at eng.it; fiware-wpa at lists.fi-ware.eu; GIDOIN Daniel; Seidl, Robert (NSN - DE/Munich); Wolfgang.Steigerwald at telekom.de
Objet : Re: On Security aspects and access control to FI-WARE GEs deployed on the FI-WARE Testbed

Hi,

  Could we try to close the doodle cast by EOB today ?   Best candidate seems to be Tuesday 25th, but I would like to make sure that I get all votes casted (Pascal's or Daniel's for example)

  Cheers,

-- Juanjo


-------------

Product Development and Innovation (PDI) - Telefonica Digital

website: www.tid.es<http://www.tid.es>

email: jhierro at tid.es<mailto:jhierro at tid.es>

twitter: twitter.com/JuanjoHierro



FI-WARE (European Future Internet Core Platform) Chief Architect



You can follow FI-WARE at:

  website:  http://www.fi-ware.eu

  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

  twitter:  http://twitter.com/FIware

  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932
On 18/09/12 17:19, Juanjo Hierro wrote:
Hi Pascal,

  Sorry I didn't know that you were traveling.

  I have extended the dates to include Monday and Tuesday next week:

http://doodle.com/msbhwgkubiwwcdnv

  Given the short notice, let's drop tomorrow (Wednesday) as alternative.   Apologizes for the inconvenience.

  Cheers,

-- Juanjo




-------------

Product Development and Innovation (PDI) - Telefonica Digital

website: www.tid.es<http://www.tid.es>

email: jhierro at tid.es<mailto:jhierro at tid.es>

twitter: twitter.com/JuanjoHierro



FI-WARE (European Future Internet Core Platform) Chief Architect



You can follow FI-WARE at:

  website:  http://www.fi-ware.eu

  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

  twitter:  http://twitter.com/FIware

  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932
On 17/09/12 16:13, BISSON Pascal wrote:
Dear Juanjo,

Thanks for your email.

Sounds indeed good to investigate how IdM GE solutions (NSN & DT ) from Security Chapter can help here. As owners of those solutions I will ask Robert and Wolfgang (both icc) to fill in the doodle to have them present at the audio conf you plan to organize on the topic.  Being said I would be travelling this week it would difficult if not impossible for me  to join as such I would appreciate if you could extend the doodle to also next week (since I would have better availabilities than this week).

Best Regards,
Pascal



De : JUAN JOSE HIERRO SUREDA [mailto:jhierro at tid.es]
Envoyé : lundi 17 septembre 2012 15:21
À : BISSON Pascal; GIDOIN Daniel
Cc : stefano.depanfilis at eng.it<mailto:stefano.depanfilis at eng.it>; fiware-wpa at lists.fi-ware.eu<mailto:fiware-wpa at lists.fi-ware.eu>
Objet : On Security aspects and access control to FI-WARE GEs deployed on the FI-WARE Testbed

Dear Pascal and Daniel,

  As already commented in my previous mail, one of the issues that were discussed during the last FI-PPP Architecture Board was the issue about access control to APIs exported by FI-WARE GEs deployed on the FI-WARE Testbed.

  As per know, we are simply applying a filtering on IP addresses that can access to APIs exported by FI-WARE GEs.   However, this is not suitable for scenarios where the IP address from which access will be requested in advance (e.g, access from mobile smartphones).   A more smart/flexible approach should be feasible relying on the Identity Management GE that should enable filtering not based on the IP addresses but the authenticated entity on behalf requests to APIs are issued.

  We need to establish a recommendation about how the Use Case projects should design their architecture of their PoC in order to implement an authenticated and single sign-on access architecture to APIs based on the Identity Management GEs.   Such recommendation may help to enrich documentation of the FI-WARE Reference Architecture.

  I believe that this, far to be a problem, is an opportunity to push usage of Identity Management GEs by Use Case Projects.

  I would like to setup a internal confcall at which I would kindly request the Security Chapter to present what they would propose on the matter, so that we can discuss what finally propose (maybe there are several formulas, so it would be worth to elaborate on each of them).   Following is a doodle that I have setup so that Pascal, Daniel and whoever they believe should attend from the Security chapter may record their availability.   Tomorrow at 12:00 CET I would announce the final date/time:
http://www.doodle.com/msbhwgkubiwwcdnv

  This internal confcall is not mandatory for all WPAs but, of course, they are more than welcome to attend.   It is highly recommended that people from the Security chapter attend.

  Cheers,


-- Juanjo



-------------

Product Development and Innovation (PDI) - Telefonica Digital

website: www.tid.es<http://www.tid.es>

email: jhierro at tid.es<mailto:jhierro at tid.es>

twitter: twitter.com/JuanjoHierro



FI-WARE (European Future Internet Core Platform) Chief Architect



You can follow FI-WARE at:

  website:  http://www.fi-ware.eu

  facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

  twitter:  http://twitter.com/FIware

  linkedIn: http://www.linkedin.com/groups/FIWARE-4239932

________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx


________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-wpa/attachments/20120920/6410d5f2/attachment.html>