Search

Collaboration among independent administrative domains would require: i) confidentiality, integrity, non-repudiation of communication between the domains; ii) minimum and reversible modifications to the intra-domain pre-collaboration setup; iii) maintain functional autonomy while collaborating; and, iv) ability to quickly transform from post-collaboration to pre-collaboration stage. In this paper, we put forward our mechanism that satisfies above requirements while staying within industry standards so that the mechanism becomes practical and deployable. Our approach is based on X.509 certificate extension. We have designed a non-critical extension capturing users΄ rights in such a unique way that the need for collaboration or the post-collaboration stage does not require update of the certificate. Thus, greatly reducing the revocation costs and size of CRLs. Furthermore, rights amplification and degradation of users from collaborating domains into host domain can be easily performed. Thus, providing functional autonomy to collaborators. Initiation of collaboration among two domains require issuance of one certificate from each domain and revocation of these certificates ends the collaboration – ease of manageability. [ABSTRACT FROM AUTHOR]

The ongoing transformation of a product-oriented economy towards a service-oriented economy has come to a critical point. In order to have services as tradable goods, the conditions of their provisioning need to be exactly specified and managed. Service Level Agreements (SLAs) have become a common means for specifying these conditions at a singular level. However, realistic service provisioning scenarios involve multiple stakeholders and layers of a business/IT stack. This paper presents an approach for multi-level SLA management, where SLAs are consistently specified and managed within a service-oriented infrastructure (SOI). We present the general approach of an SLA management framework, a conceptual architecture and some insights into industrial practice in various domains. [ABSTRACT FROM AUTHOR]