Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Slide 1

Enforcing RFID Data Visibility Restrictions using XACML security policies

Miguel Pardal, Mark Harrison, Sanjay Sarma, José Alves Marques

Técnico Lisboa, University of Cambridge, Massachusetts Institute of Technology

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Traceability systems assessment framework

Slide 2

http://trakchain.net

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Each individual item takes a unique path...

Slide 3

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Traceability data security

Slide 4

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

SCAz – Supply Chain Authorization Language

• Classical authorization mechanisms - EAC – Enumerated Access Control

• Access control lists

- CCT – Chain of Communication Tokens

Slide 5

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Externalized security

•Authentication

- SAML

•Message level (cryptographic) protection

- TLS

•Authorization

- XACML

Slide 6

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

eXtensible Access Control Markup Language

Slide 7

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

XACML request processing

Slide 8

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Performance assessment tool

Slide 9

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

EAC processing time breakdown for request evaluation

Slide 10

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

EAC and CCT evaluation time with increasing item numbers

Slide 11

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Contributions

• Data sharing policies

• XACML translation

• Correctness check

• Performance assessment

• Future work - Pharma pedigree case study

- Combine approaches in expressive language

- “Automatic” authorization • minimize admin burden for traceability data sharing

Slide 12

Miguel Pardal, Enforcing RFID Data Visibility using XACML security policies

Visit http://trakchain.net

Slide 13

Merci!