Security for Cloud and Mobile
  Security Federations
  Document Security
    Document Tracing
      By User
      By Destination
      By source
      By Location
  Current standards
    SAML
    NAC/IDS
    SSL Certificates/HTTPS
    User Login
    OpenID
    WS-Security/WS-Federation
    XACML
    Web Services for Devices
    Bonjour
  Identification
    User
      User Name
      email address
      biometrics
      Common Access Card
      smartID
        enhanced Dl
        Passport
    Device
      Mobile device ID
        MEID
        IMEI
      GUID
      DNS Entry
        Bonjour
    Service
      URL
      GUID
      WS-Addressing
      DNS
        Bonjour
        DNSSEC
        DynamicDNS
  Authentication
    User
      Remote Authentication
        Trusted Certificate
        Location
        OpenID
    Device
      Security Token
        X.509
      NAC/TNC/NAP
    Service
      Security Token
        X.509
  Authorization
    User
      User Policies
        Location based
        Physical Access
        Allowable operations
    Device
      Device Policies
        Device Location
    Service
    Authorization Predicates
If the service trusts the device, then it will trust a user vouched for by the device
If the Service trusts the user, then it doesn’t necessarily matter what device is being used
Override by device policy
Override by user device list
SAML<br><br>NAC/IDS<br><br>SSL Certificates/HTTPS<br><br>User Login<br><br>OpenID
CDMA Mobile Equipment Identifier
GSM International Mobile Equipment Identifier
i.e. WSD device quid
Used by all Apple devices
Is the user who they say they are?
Do we know this device?Security Tokenr
Is the user allowed to do what they’re trying to do?
Is the requested operation allowed on this device?
How do we determine what is allowed?
Is any device from this location (i.e. country) allowed to have access?