
Subscribe to
Computerworld
or
Other SOA & Web Services Stories
|
September 22, 2003 (Computerworld) -- ... and virtual assets more effectively than traditional security measures, claims Phil Libin, president of CoreStreet Ltd., a security firm in Cambridge, Mass. According to Libin, if you divide identity management functions into an authentication process (you are who you say you are) and authorization (you can do what you try to do), your systems will be at least as secure as a monolithic system, and you'll be able to protect physical assets with the same technology. "Use whatever authentication technology you choose -- biometrics, passwords, digital certificates, whatever -- but don't use the same system for authorization," he warns. That's because most combination identification management products use a centralized LDAP or Microsoft Active Directory database to authorize what a user can do once he's been authenticated. That's OK if all you're doing is having people log onto computers locally. But Libin says performance will be unacceptable for a widely distributed organization or for linking physical access with your online authorization system. The company's (take a breath) CoreStreet Real Time Credential Validation Authority purports to fix that. It uses edge servers, such as those offered by Akamai Technologies Inc., also in Cambridge, to send fast, 20B authorizations to requesting devices -- even door locks. That's why Stockholm-based Assa Abloy AB, the world's largest maker of locks with brands such as Yale and Chubb, will be adopting the technology in early 2004.
And if you're building an identity management system in Web services, you're probably fumbling with lots of Java or .Net code and gazing at all the specifications being bandied about the industry, hoping to follow the right path. Well, early next quarter, you might get some relief when Phaos Technology Corp. in New York releases Liberty Identity Management 1.0. The product can take existing ID management software offerings, such as those from Netegrity Inc. in Waltham, Mass., or Oblix Inc. in Cupertino, Calif., and tie them into a Web services application following the proposed industry standards. "Beats the heck out of trying to do it yourself," says Phaos CEO Roger Sullivan. Makes you wonder whether that's a warning or a promise to Web services developers.
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
All Zones Application Performance Zone Enterprise-Class Security Zone Enterprise Solutions Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone The Data Center Management Zone |
|
|
| ||||||||
| ||||||||
| ||||||||
|



| Detect, identify, and locate RF interference in 802.11 WLANs. AnalyzeAir software provides IT network professionals with the vision they need into the hidden world of RF, providing them with the ability to see the spectrum in a visible and intelligible format. AnalyzeAir software lets you see, monitor, analyze, and manage all the RF sources and wireless devices that influence your Wi-Fi network's performance and security, even if those devices are unauthorized or transient. AnalyzeAir Trial Software v3.1 highlights the features found in AnalyzeAir Software using a set of saved spectrum files. Replay the data and experience the visibility that AnalyzeAir Wi-Fi Spectrum Analyzer provides. Note: The trial software is limited to a player version only. It does not communicate with an AnalyzeAir PC card so it does not collect actual spectrum data. Register for this trial now.
|

| Try Fluke Networks'
EtherScope Analyzer on your network FREE Quickly solve the wide range of problems you encounter - 10, 100 and Gigabit, twisted pair and optical fiber, LAN or wireless LAN. The EtherScope Analyzer combines the essential tools you need to monitor network traffic and switch interfaces, discover devices, networks, VLANs, access points, mobile clients and more. See the power of this portable network analyzer on your network. Request free trial now
*Terms and conditions: Evaluation units are available only for a limited time and will be scheduled on a first-come first-served basis. Not available in all geographies. Limited quantities available; customers requesting evaluation units may be waitlisted for the next available unit. It will be at the discretion of Fluke Networks to accept or decline requests for this free evaluation. |
| About Us Advertise Contacts Editorial Calendar Help Desk Jobs at IDG Privacy Policy Reprints Site Map |
|
CIO The Industry Standard |