@inproceedings {Agudo2007a, title = {Attribute delegation in ubiquitous environments}, booktitle = {3rd international conference on Mobile multimedia communications (MobiMedia {\textquoteright}07)}, year = {2007}, pages = {43:1{\textendash}43:6}, publisher = {ICST}, organization = {ICST}, address = {Nafpaktos, Greece}, abstract = {

When delegation is implemented using the attribute certificates in a Privilege Management Infrastructure (PMI), this one reaches a considerable level of distributed functionality. However, the approach is not flexible enough for the requirements of ubiquitous environments. Additionally, the PMI can become a too complex solution for devices such as smartphones and PDAs, where resources are limited. In this work, we solve the previous limitations by defining a second class of attributes, called domain attributes, which are managed directly by users and are not right under the scope of the PMI, thus providing a light solution for constrained devices. The two classes of attributes are related by defining a simple ontology. We also introduce in the paper the concept of Attribute Federation which is responsible for supporting domain attributes and the corresponding ontology.

}, isbn = {978-963-06-2670-5}, author = {Isaac Agudo and Javier Lopez and Jose A. Montenegro} } @inproceedings {IsaacAgudo2006, title = {Attributes Delegation Based on Ontologies and Context Information}, booktitle = {10th IFIP TC-6 TC-11 International Conference on Communications and Multimedia on Security (CMS{\textquoteright}06)}, series = {LNCS}, volume = {4237}, year = {2006}, month = {October}, pages = {54-66}, publisher = {Springer}, organization = {Springer}, address = {Heraklion, Crete}, abstract = {

This paper presents a model for delegation based on partial orders, proposing the subclass relation in OWL as a way to represent the partial orders. Delegation and authorization decisions are made based on the context. In order to interact with the context, we define the Type of a credential as a way to introduce extra information regarding context constraints. When reasoning about delegation and authorization relationships, our model benefits from partial orders, defining them over entities, attributes and the credential type. Using these partial orders, the number of credentials required is reduced. It also classifies the possible criteria for making authorization decisions based on the context, in relation to the necessary information.

}, isbn = {978-3-540-47820-1}, issn = {0302-9743 (Print) 1611-3349 (Online)}, doi = {10.1007/11909033_6}, author = {Isaac Agudo and Javier Lopez and Jose A. Montenegro} } @inproceedings {JavierAreitio2001, title = {An{\'a}lisis, Dise{\~n}o e Implementaci{\'o}n de un Entorno Escalable de Comercio-e con Seguridad Telem{\'a}tica Adaptable Basada en PKI}, booktitle = {I Simposio Espa{\~n}ol de Comercio Electr{\'o}nico (SEC{\textquoteright}01)}, year = {2001}, month = {Octubre}, pages = {145-160}, address = {M{\'a}laga, Espa}, abstract = {

La presente ponencia aborda el desarrollo de un entorno seguro escalable para el Comercio Electr\ónico. Se ha tratado la cuesti\ón en dos fases: primero, idear un prototipo generalizado distribuido seguro formado por diferentes entidades gen\éricas con el objetivo de permitir que los clientes realicen sus compras y transacciones bancarias con un nivel de seguridad escalable; y en segundo lugar, implantar en la pr\áctica un prototipo de grado de escalabilidad reducido como modelo emp\írico.

}, author = {Javier Areitio and Lorenzo Mart{\'\i}nez and Javier Lopez and Jose A. Montenegro} } @inproceedings {JavierLopez2000, title = {Aspectos de Implementaci{\'o}n de una Infraestructura de Clave P{\'u}blica Distribuida}, booktitle = {Simposio Espa{\~n}ol de Inform{\'a}tica Distribuida (SEID{\textquoteright}00)}, year = {2000}, month = {Septiembre}, pages = {313-320}, address = {Orense, Espa}, abstract = {

La seguridad es uno de los aspectos m\ás conflictivos del uso de Internet. La falta de una pol\ítica de seguridad global est\á frenando el desarrollo de Internet en \áreas tan interesantes y prometedoras como el comercio electr\ónico o la interacci\ón con las administraciones p\úblicas. Las t\écnicas criptogr\áficas actuales proporcionan un alto grado de confidencialidad; no obstante, es dif\ícil garantizar la identificaci\ón segura de los usuarios y, adem\ás, la gesti\ón de las claves de los mismos es poco eficiente y presenta graves problemas de escalabilidad. Este trabajo describe las caracter\ísticas de implementaci\ón de una soluci\ón a ambos problemas basada en una Infraestructura de Clave P\ública (PKI) que proporciona una administraci\ón simple y eficiente de las claves de los usuarios y posibilita la autenticaci\ón segura de los mismos.

}, author = {Javier Lopez and Antonio Mana and Jose A. Montenegro and Juan J. Ortega and Jose M. Troya} }