Nouriddine, Moustafa and Bashroush, Rabih (2011) ‘A Provisioning Model towards OAuth 2.0 Optimization’, 10th IEEE International Conference on Cybernetic Intelligent Systems. London, September 2011.
A Provisioning Model towards OAuth 2 Performance Optimization CRC.pdf - Accepted Version
Available under License Creative Commons Attribution No Derivatives.
Download (176Kb) | Preview
A major hurdle of formal adoption of OAuth protocol for enterprise applications is performance. Enterprise applications (e.g. SAP, SharePoint, Exchange Server, etc.) require a mechanism to predict and manage performance expectations. As these applications become more and more ubiquitous in the Cloud, the scale and performance expectations become an important factor impacting architectural decisions for security protocol adoption. This paper proposes an optimization to OAuth 2.0 for enterprise adoption. This optimization is achieved by introducing provisioning steps to pre-establish trust amongst enterprise applications’ Resource Servers, its associated Authorization Server and the clients interested in access to protected resources. In this model, trust is provisioned and synchronized as a pre-requisite step to authentication and authorization amongst all communicating entities in OAuth protocol, namely, the client requesting a protected resource, the resource server, and the authorization server. For a case study, we analyze SAP authenticating with SharePoint using our optimization versus existing OAuth protocol. We believe such optimization will further facilitate the adoption of OAuth in the enterprise where scale and performance are critical factors.
|Item Type:||Conference or Event Item (Paper)|
|Additional Information:||Citation: M. Nouriddine and R. Bashroush, “A Provisioning Model towards OAuth 2.0 Optimization”, in Proceedings of the 10th IEEE International Conference on Cybernetic Intelligent Systems, London, UK, September 2011..|
|Divisions:||Schools > Architecture Computing and Engineering, School of|
|Depositing User:||Rabih Bashroush|
|Date Deposited:||12 Apr 2012 22:16|
|Last Modified:||12 Oct 2012 14:09|
Actions (login required)