History Organization Business view Outlook Technical view ... · History Organization Business view...

Organization Business viewHistory Outlook

© Star Alliance Services GmbH, 2003

Technical view Approach




In 1997 Air Canada, Lufthansa, SAS, Thai Airways International and United Airlines established Star Alliance – the first global airlinealliance.

The vision„To be the leading global airline alliance

for the frequent international traveller.„

continues to drive us today.

A Global Solution




Six years after its foundation, Star Alliance continues to be the leading and the largest global alliance, offering

16 quality airlines• a member carrier flight takes off or lands every 4 seconds

a comprehensive global network• covering 128 countries and over 700 airports

a wide range of frequent flyer travel benefits• bonus points redeemable on any member• over 500 airport lounges worldwide

A Global Solution




Dedicated organizationSummary

Star Alliance has created a dedicated organization to support product development based in Frankfurt, Germany

68 airline professionals and specialists working to deliver added value to customers and member airlines

developing new products and servicesbuilding and improving facilities at key hubsenhancing schedule coordinationspreading valuable skills, training and operating efficiencies




Technological SupportOur ability to exchange information across different IT systems is unique in the industry and a key production factor for the alliance.We are committed to create the technological support systems that enable employees to deliver more to customers.

Aside from providing vital infrastructure elements, Star Alliance has been developing business applications for joint use by all members.Today, the economic situation in the airline industry lets us focus even more on such cost saving initiatives.




Challenges The new Star Alliance identity and security management should:

cut cost for user authentication reduce complexity when sharing business applicationsbe capable to handle close to half a million potential userscontrol access rights based on a users relation to the organizationinclude a Public Key Infrastructure (PKI)allow member airlines to retain data ownership and autonomybe implemented without changes to the airlines own IT infrastructure




Solution We found that one way to address these problems was to leverage technologies like Novell eDirectory and DirXML.

They allow us to: centrally manage user IDs and passwords in the required numberssynchronize data with a variety of input systemsimplement role-based access controlinterface very closely with a PKIdistribute administrational tasks




Product considerationsA best-of-breed approach would have left us with the integrator role.This was neither the intention nor is it a key competence of Star Alliance.

A simple password-management tool would not have supported mandatory features like:

Role-based administrationPublic Key InfrastructureAdministration of device access




The Directory and Security Services (DSS) SolutionUnique IDs are created using the airline’s user-ID plus the airline code.

Unidirectional synchronization is used to leave airlines in control of their user data.

The directory accepts a wide range of input formats – from Excel sheets to common HR systems.

Administration tasks can be delegated.

Directory

SKOS

LH

AC

UA

MXTGBD

...

SQ

NH

RG




Integrating ApplicationsStar Alliance applications are required to use the DSS for user management.

For shared applications, the use of DSS facilitates user management.

Applications may use an LDAP interface or synchronize via Novell DirXML.

Ownership for application-specific attributes is defined on the attribute level.

Directory

SK OS

LH

AC

UA

MXTGBD

...

SQ

NH

RG




The PKI:

stores and administers certificates in the central directorycreates standard X.509 V3 certificates for signing, authentication or encryptionallows revocation of certificates via X.509 CRLs or OCSPoffers key recovery for centrally generated keys with a key length up to 4096 bitsupports smartcards and other tokens

Public Key Infrastructure




Reducing Complexity – A phased approachPhase I

Concentration on Star-owned applicationsProof of Concept for directory and PKISystem architecture and hardware for full-scale operationBasic schema definitionDefinition of necessary processes, policies and organizational prerequisites




Reducing Complexity – A phased approachPhase II is split into smaller roll-out projects in order to

Solve airline-specific technical and security issues bilaterally.Address country-specific legal topics in detail.Be able to adjust processes and policies.Distribute workload over time.




The future of DSSCustomers appreciate one source of information for their travel-related information. On www.staralliance.com, information about all products and services, timetables, frequent flyer benefits, a round-the-world mileage calculator and much more is available.




The future of DSS

On a personalized website, service could even be improved.

Customers‘ preferences might easily be stored in the directory for use in a portal.Using SAML to connect to other companies would enable easy redemption of frequent flyer bonus points / miles at hotels, carrentals etc.




Thank you for your attention !




Date post:	12-Mar-2020
Category:	Documents
Upload:	others
View:	5 times
Download:	0 times

History Organization Business view Outlook Technical view ... · History Organization Business view...

Documents