OpenID authentication as a service in OpenStack
2011 (English)In: 2011 7th International Conference on Information Assurance and Security, 2011, 372-377 p.Conference paper (Refereed)
The evolution of cloud computing is driving the next generation of internet services. OpenStack is one of the largest open-source cloud computing middleware development communities. Currently, OpenStack supports platform specific signatures and tokens for user authentication. In this paper, we aim to introduce a cloud platform independent, flexible, and decentralized authentication mechanism, using OpenID as an open-source authentication mechanism in OpenStack. OpenID allows a decentralized framework for user authentication. It has its own advantages for web services, which include improvements in usability and seamless Single-Sign-On experience for the users. This paper presents the OpenlD-Authentication-as-a-Service APIs in OpenStack for front-end GUI servers, and performs the authentication in the back-end at a single Policy Decision Point (PDP). Our implementation allows users to use their OpenID Identifiers from standard OpenTD providers and log into the Dashboard/Django-Nova graphical interface of OpenStack.
Place, publisher, year, edition, pages
2011. 372-377 p.
, Proceedings of the 2011 7th International Conference on Information Assurance and Security, IAS 2011
Authentication, EC2API, OpenID, OpenStack, OS-API, Security, Cloud computing, Middleware, Network security, Web services
IdentifiersURN: urn:nbn:se:kth:diva-149899DOI: 10.1109/ISIAS.2011.6122782ScopusID: 2-s2.0-84856677194ISBN: 9781457721533OAI: oai:DiVA.org:kth-149899DiVA: diva2:743875
2011 7th International Conference on Information Assurance and Security, IAS 2011, 5 December 2011 through 8 December 2011, Malacca
QC 201409052014-09-052014-08-282014-09-05Bibliographically approved