W-CAS: A Central Users Authentication and Authorization System for Enterprise Wide Web Applications

Authors: Sharil Tumin, Sylvia Encheva

Abstract:

Centrally controlled authentication and authorization services can provide enterprise with an increase in security, more flexible access control solutions and an increased users' trust. By using redirections, users of all Web-based applications within an organization are authenticated at a single well known and secure Web site and using secure communication protocol. Users are first authenticated at the central server using their domain wide credentials before being redirected to a particular Web-based application. The central authentication server will then provide others with pertinence authorization related particulars and credentials of the authenticated user to the specific application. The trust between the clients and the server hosts is established by secure session keys exchange. Case- studies are provided to demonstrate the usefulness and flexibility of the proposed solution.

Keywords: Authentication, Authorization, Security, Protected Web-based Applications

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1328382

References:

[1] H. Kopka and P. W. Daly, A Guide to LATEX 3RD E. Harlow, England: Addison-Wesley, 1999.
[2] Jasig, Central Authentication Service Project, http://www.jasig.org/cas, 2011 (last acc.).
[3] Machform, PHP HTML Form Builder - Mailer Form Creator, http://www.appnitro.com, 2011 (last acc.).
[4] OpenID Foundation, Safe, faster and easier way to log in to web sites, http://openid.net/, 2011 (last acc).
[5] Wikipedia, Central Authentication Service, http://en.wikipedia.org/wiki/Central_Authentication_Service, 2011 (last acc.).