Service Oriented Architecture for Distributed Identity Management System

13
Copyright 2005 Digital Enterprise Research Institute. All rights reserved. www.deri.org Service Oriented Architecture for Distributed Identity Management System Adam Gzella
  • date post

    21-Oct-2014
  • Category

    Education

  • view

    7.209
  • download

    0

description

Short presentation of SOA leyer for FOAFRealm (Distributed Identity Management System). It shows the motivation and how the goals were achieved.

Transcript of Service Oriented Architecture for Distributed Identity Management System

Page 1: Service Oriented Architecture for Distributed Identity Management System

Copyright 2005 Digital Enterprise Research Institute. All rights reserved.

www.deri.org

Service Oriented Architecture for Distributed Identity Management

System

Adam Gzella

Page 2: Service Oriented Architecture for Distributed Identity Management System

Outline

• Scenario• SOA as a solution• REST vs. SOAP• Final system architecture• System perspectives

Page 3: Service Oriented Architecture for Distributed Identity Management System

Take-away message (motto)

• Main goal is to help people with multiple credentials problem and complicated registration process.

• Achieved by simple, universal identity management system:– D-FOAF extended with SOA.D-FOAF extended with SOA.

Page 4: Service Oriented Architecture for Distributed Identity Management System

Scenario

• Alice registered to the travel.comtravel.com easily (possibly with FOAF profile)

• then she logs to the service and manage the profile

Alicetravel.comtravel.com FOAFRealmFOAFRealm

FOAF

login();

Page 5: Service Oriented Architecture for Distributed Identity Management System

Scenario

• Alice logs into music.com and games.com without new registration

Alice

travel.comtravel.com FOAFRealmFOAFRealm

music.commusic.com FOAFRealmFOAFRealm

games.comgames.com FOAFRealmFOAFRealm

D-FOAFD-FOAF

Page 6: Service Oriented Architecture for Distributed Identity Management System

Scenario

• Alice uses lot more various services (build with varius languages) with the same credentials.

• How to achieve this? How to achieve this? • How to make D-FOAF popular - solve multiple How to make D-FOAF popular - solve multiple

credentials problem?credentials problem?• Separate implementations or unified service

access method?

MobilesMobiles

JavaJava

PHPPHP

.Net.Net

D-FOAFD-FOAF??

Page 7: Service Oriented Architecture for Distributed Identity Management System

Scenario

• Alice uses lot more various services with the same credentials.

Alice

travel.comtravel.com FOAFRealmFOAFRealm

music.commusic.comFOAFRealmFOAFRealm

games.comgames.com

FOAFRealmFOAFRealm

D-FOAFD-FOAF

movies.commovies.com

fun.comfun.com

sport.comsport.com

pets.compets.com

SOASOA(REST)(REST)

SOASOA(REST)(REST)

SOASOA(REST)(REST)

Page 8: Service Oriented Architecture for Distributed Identity Management System

Why SOA?

• Fully Web oriented– FOAFRealm/D-FOAF is

Web appliaction

• Language independent• Platform independent

Firewall

SOASOASOASOA

LinuxLinuxLinuxLinux

C/C++C/C++C/C++C/C++

JMEJMEJMEJME

WindowsWindowsWindowsWindows

JEEJEEJEEJEE

.Net.Net.Net.NetPHPPHPPHPPHP

Page 9: Service Oriented Architecture for Distributed Identity Management System

SOA Implementation – REST vs SOAP

• Why REST was selected?– Resource oriented.– Semantic Web compilant (URI, RDF)– Real Web utilisation (HTTP)– Simplicity and clearness

??

Page 10: Service Oriented Architecture for Distributed Identity Management System

REST SOA - Example

FOAFRealmFOAFRealmSOASOA

(REST)(REST)Alice RDF

GET http://foafrealm.org/soa/[email protected]/nickPOST http://foafrealm.org/soa/[email protected]/nick

RDF(with new nick)

(with authentication information)

Page 11: Service Oriented Architecture for Distributed Identity Management System

Final system

• Universal Identity Management System– JEE, PHP, .Net, JME implementations– Backward compatibility

• In wider scope: – solution for multiple credentials problem.

Page 12: Service Oriented Architecture for Distributed Identity Management System

Final system – perspectives

• Lot of possible future implementations:– next version of JeromeDL (semantic digital libraries)– DigiMe– MarcOnt Portal – Didaskon

• Extending SOA to other FOAFRealm modules, like SSCF (Social Semantic Collaborative Filtering)

Page 13: Service Oriented Architecture for Distributed Identity Management System

Adam [email protected]

National University of Ireland, GalwayDigital Enterprise Research Institute