An Access Control Mechanism for Geospatial Information Services

Author

Lin, Jiayuan ; Tao, Heping ; Zhu, Gaolong

Author_Institution

Inst. of Mountain Hazards & Environ., Chinese Acad. of Sci., Chengdu, China

fYear

2009

fDate

26-28 Dec. 2009

Firstpage

1971

Lastpage

1974

Abstract

The specifications of geospatial information services released by OGC provide a comprehensive framework for integration and sharing of distributed and heterogeneous geospatial information. Due to various security threats in distributed environment and prevalent copyright violations in practice, there is a strong demand to secure access to geospatial information provided in the form of services. The requirements for geospatial information services are fine-grained and spatially aware access control. In this paper, we propose a mechanism of using GeoXACML and SAML to realize access control for geospatial information services. The GeoXACML is responsible for declaration of geospatial authorization rules. The SAML is in charge of security assertions, secure transmission, and authentication in multiple security domains. Finally, we present the reference framework of the access control system and explain the specific procedure to control access to geospatial information services.

Keywords

Web services; authorisation; copyright; geophysics computing; GeoXACML; SAML; access control mechanism; copyright violations; heterogeneous geospatial information services; multiple security domains; security threats; spatially aware access control; Access control; Authentication; Authorization; Control systems; Geographic Information Systems; Hazards; ISO standards; Information science; Information security; Mechanical factors;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Science and Engineering (ICISE), 2009 1st International Conference on

Conference_Location

Nanjing

Print_ISBN

978-1-4244-4909-5

Type

conf

DOI

10.1109/ICISE.2009.223

Filename

5455387