Collaboration-oriented architecture: Difference between revisions
No edit summary |
Rescuing 3 sources and tagging 0 as dead. #IABot (v1.5beta) |
||
Line 4: | Line 4: | ||
'''Collaboration Oriented Architecture''' ('''COA''') is a computer system that is designed to [[Collaboration|collaborate]], or use services, from systems that are outside of the operators control. Collaboration Oriented Architecture will often use [[Service Oriented Architecture]] to deliver the technical framework. |
'''Collaboration Oriented Architecture''' ('''COA''') is a computer system that is designed to [[Collaboration|collaborate]], or use services, from systems that are outside of the operators control. Collaboration Oriented Architecture will often use [[Service Oriented Architecture]] to deliver the technical framework. |
||
Collaboration Oriented Architecture is the ability to collaborate between systems that are based on the [[Jericho Forum]] principles or "Commandments".<ref>[[Jericho Forum]], "Commandments", [http://www.jerichoforum.org/commandments_v1.2.pdf Jericho Forum Commandments], May 2007.</ref> |
Collaboration Oriented Architecture is the ability to collaborate between systems that are based on the [[Jericho Forum]] principles or "Commandments".<ref>[[Jericho Forum]], "Commandments", [http://www.jerichoforum.org/commandments_v1.2.pdf Jericho Forum Commandments] {{webarchive|url=https://web.archive.org/web/20110726044903/http://www.jerichoforum.org/commandments_v1.2.pdf |date=26 July 2011 }}, May 2007.</ref> |
||
Bill Gates and Craig Mundie (Microsoft) <ref>[http://www.microsoft.com/Presspass/exec/billg/speeches/2007/02-06RSA.mspx Bill Gates, Craig Mundie: RSA Conference 2007. Transcript of keynote discussion between Microsoft Chairman Bill Gates and Chief Research & Strategy]</ref><ref>[http://www.microsoft.com/winme/0702/29377/RSA_mbr.asx Bill Gates Webcast, Bill Gates and Craig Mundie Keynote at RSA Conference 2007: Advancing Trust in Today’s Connected World]</ref> clearly articulated the need for people to work outside of their organizations in a secure and collaborative manner in their opening keynote to the RSA Security Conference in February 2007.<ref>{{cite web|title=Forensics and Incident Response|url=https://www.peerlyst.com/categories/forensics-and-incident-response|publisher=www.peerlyst.com|accessdate=23 May 2016}}</ref> |
Bill Gates and Craig Mundie (Microsoft) <ref>[http://www.microsoft.com/Presspass/exec/billg/speeches/2007/02-06RSA.mspx Bill Gates, Craig Mundie: RSA Conference 2007. Transcript of keynote discussion between Microsoft Chairman Bill Gates and Chief Research & Strategy]</ref><ref>[http://www.microsoft.com/winme/0702/29377/RSA_mbr.asx Bill Gates Webcast, Bill Gates and Craig Mundie Keynote at RSA Conference 2007: Advancing Trust in Today’s Connected World]</ref> clearly articulated the need for people to work outside of their organizations in a secure and collaborative manner in their opening keynote to the RSA Security Conference in February 2007.<ref>{{cite web|title=Forensics and Incident Response|url=https://www.peerlyst.com/categories/forensics-and-incident-response|publisher=www.peerlyst.com|accessdate=23 May 2016}}</ref> |
||
Line 24: | Line 24: | ||
== Authentication in a Collaboration Oriented Architecture == |
== Authentication in a Collaboration Oriented Architecture == |
||
Working in a collaborative multi-sourced environment implies the need for authentication, authorization and accountability which must interoperate / exchange outside of your locus / area of control.<ref>[http://www.jerichoforum.org/commandments_v1.2.pdf Jericho Forum Commandment #8 ]</ref> |
Working in a collaborative multi-sourced environment implies the need for authentication, authorization and accountability which must interoperate / exchange outside of your locus / area of control.<ref>[http://www.jerichoforum.org/commandments_v1.2.pdf Jericho Forum Commandment #8 ] {{webarchive|url=https://web.archive.org/web/20110726044903/http://www.jerichoforum.org/commandments_v1.2.pdf |date=26 July 2011 }}</ref> |
||
* People/systems must be able to manage permissions of resources and rights of users they don't control |
* People/systems must be able to manage permissions of resources and rights of users they don't control |
||
* There must be capability of trusting an organization, which can authenticate individuals or groups, thus eliminating the need to create separate identities |
* There must be capability of trusting an organization, which can authenticate individuals or groups, thus eliminating the need to create separate identities |
||
Line 41: | Line 41: | ||
* [http://doi.ieeecomputersociety.org/10.1109/ECBS.2006.5 A collaboration-oriented software architecture modeling system] |
* [http://doi.ieeecomputersociety.org/10.1109/ECBS.2006.5 A collaboration-oriented software architecture modeling system] |
||
* [http://www.ibm.com/systems/z/soa/ Enterprise collaboration with Service Oriented Architecture (SOA)] |
* [http://www.ibm.com/systems/z/soa/ Enterprise collaboration with Service Oriented Architecture (SOA)] |
||
* [http://whitepapers.silicon.com/0 |
* [https://web.archive.org/web/20070926225623/http://whitepapers.silicon.com/0%2C39024759%2C60288728p-39000639q%2C00.htm Collaboration Services in a Services Oriented Architecture] |
||
[[Category:Computer security]] |
[[Category:Computer security]] |
Revision as of 15:02, 10 August 2017
![]() | This article includes a list of general references, but it lacks sufficient corresponding inline citations. (July 2014) |
Collaboration Oriented Architecture (COA) is a computer system that is designed to collaborate, or use services, from systems that are outside of the operators control. Collaboration Oriented Architecture will often use Service Oriented Architecture to deliver the technical framework.
Collaboration Oriented Architecture is the ability to collaborate between systems that are based on the Jericho Forum principles or "Commandments".[1]
Bill Gates and Craig Mundie (Microsoft) [2][3] clearly articulated the need for people to work outside of their organizations in a secure and collaborative manner in their opening keynote to the RSA Security Conference in February 2007.[4]
Successful implementation of a Collaboration Oriented Architecture implies the ability to successfully inter-work securely over the Internet and will typically mean the resolution of the problems that come with de-perimeterisation.
Origin of the term
The term Collaboration Oriented Architectures [5] was defined and developed in a meeting of the Jericho Forum at a meeting held at HSBC on 6 July 2007.
Definition of a Collaboration Oriented Architecture
The key elements that qualify a security architecture as a Collaboration Oriented Architecture are as follows;
- Protocol: Systems use appropriately secure protocols to communicate.
- Authentication: The protocol is authenticated with user and/or system credentials.
- Federation: User and/or systems credentials are accepted and validated by systems that are not under your (locus of) control.
- Network Agnostic: The design does not rely on a secure network, thus it will operate securely from an Intranet to raw-Internet
- Trust: The collaborating system have the capacity to be able to confirm to a specified degree of confidence that the components in a transaction chain have.
- Risk: The collaborating systems can make a risk assessment on any transaction based on the communicated levels of required trust, based on the required degree of identity, confidentiality, integrity, availability.
Authentication in a Collaboration Oriented Architecture
Working in a collaborative multi-sourced environment implies the need for authentication, authorization and accountability which must interoperate / exchange outside of your locus / area of control.[6]
- People/systems must be able to manage permissions of resources and rights of users they don't control
- There must be capability of trusting an organization, which can authenticate individuals or groups, thus eliminating the need to create separate identities
- In principle, only one instance of person / system / identity may exist, but privacy necessitates the support for multiple instances, or one instance with multiple facets, often referred to s personas
- Systems must be able to pass on security credentials /assertions
- Multiple loci (areas) of control must be supported
References
- ^ Jericho Forum, "Commandments", Jericho Forum Commandments Archived 26 July 2011 at the Wayback Machine, May 2007.
- ^ Bill Gates, Craig Mundie: RSA Conference 2007. Transcript of keynote discussion between Microsoft Chairman Bill Gates and Chief Research & Strategy
- ^ Bill Gates Webcast, Bill Gates and Craig Mundie Keynote at RSA Conference 2007: Advancing Trust in Today’s Connected World
- ^ "Forensics and Incident Response". www.peerlyst.com. Retrieved 23 May 2016.
- ^ https://www.opengroup.org/jericho/COA_v2.0.pdf
- ^ Jericho Forum Commandment #8 Archived 26 July 2011 at the Wayback Machine