[Fiware-wpa] Security aspects and access control to FI-WARE GEs deployed on the FI-WARE Testbed

[Wolfgang.Steigerwald at telekom.de]

Hello Juan,

sorry but I don't have so much time. I expected a 1 hour duration of the call, otherwise I would have filled the doodle in the way I had. When we start at 14:00 I have to leave at 14:55 because I will have another Meeting. Sorry for that but you selected a week which is very busy for me.

Best regards

 Wolfgang


-----Ursprünglicher Termin-----
Von: JUAN JOSE HIERRO SUREDA [mailto:jhierro at tid.es]
Gesendet: Donnerstag, 20. September 2012 12:22
An: BISSON Pascal; GIDOIN Daniel; fiware-wpa at lists.fi-ware.eu; stefano de panfilis; robert.seidl at nsn.com; Steigerwald, Wolfgang
Betreff: Security aspects and access control to FI-WARE GEs deployed on the FI-WARE Testbed
Zeit: Dienstag, 25. September 2012 14:00-16:30 (UTC+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien.
Ort:



When: Tuesday, September 25, 2012 2:00 PM-4:30 PM. (UTC+01:00) Brussels, Copenhagen, Madrid, Paris

*~*~*~*~*~*~*~*~*~*





We'll use powwownow.   PIN: 050662.   Local dial-in phone numbers at:


http://pdf.powwownow.com/pdf/USA_en_pwn-dial-in-numbers.pdf


We can use https://join.me<http://join.me> for sharing the screen




Background info:


one of the issues that were discussed during the last FI-PPP Architecture Board was the issue about access control to APIs exported by FI-WARE GEs deployed on the FI-WARE Testbed.

  As per know, we are simply applying a filtering on IP addresses that can access to APIs exported by FI-WARE GEs.   However, this is not suitable for scenarios where the IP address from which access will be requested in advance (e.g, access from mobile smartphones).   A more smart/flexible approach should be feasible relying on the Identity Management GE that should enable filtering not based on the IP addresses but the authenticated entity on behalf requests to APIs are issued.

  We need to establish a recommendation about how the Use Case projects should design their architecture of their PoC in order to implement an authenticated and single sign-on access architecture to APIs based on the Identity Management GEs.   Such recommendation may help to enrich documentation of the FI-WARE Reference Architecture.

  I believe that this, far to be a problem, is an opportunity to push usage of Identity Management GEs by Use Case Projects.



  ________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-wpa/attachments/20120920/8de70be9/attachment.html>