Security for Cloud and Mobile
  Identification
    User
      User Name
      email address
      biometrics
      Common Access Card
      smartID
        enhanced Dl
        Passport
    Device
      Mobile device ID
        MEID
        IMEI
      GUID
      Bonjour
      DNS Entry
      Web Service for Devices
    Service
      URL
      GUID
      WS-Addressing
      Bonjour
      DNS
        DNSSEC
        DynamicDNS
  Authentication
    User
      Remote Authentication
        Location
        OpenID
        Security Token
          X.509
    Device
      Security Token
        X.509
      NAC/TNC/NAP
    Service
      Security Token
        X.509
    Authority
      LDAP
      Certificate Authorities
      Active Directory
      NetInfo
      OpenID
      NIS
      PAM
  Authorization
    User
      User Policies
        Location based
        Physical Access
        Allowable operations
    Device
      Device Policies
        Device Location
    Service
    Authorization Predicates
  Document Security
    Document Tracing
      User
      Destination
      source
      Location
      Time
    Encryption Method
    Authentication
  Security Federations
  Current standards
    SAML
    NAC/IDS
    SSL Certificates/HTTPS
    User Login
    OpenID
    WS-Security/WS-Federation
    XACML
    Web Services for Devices
    Bonjour
CDMA Mobile Equipment Identifier
GSM International Mobile Equipment Identifier
i.e. WSD device quid
Used by all Apple devices
Is the user who they say they are?
Do we know this device?Security Tokenr
Is the user allowed to do what they’re trying to do?
Is the requested operation allowed on this device?
How do we determine what is allowed?
Is any device from this location (i.e. country) allowed to have access?
Note for cloud in general - cloud documents need an expiration date/time value for when they are to be deleted if not retrieved - should service also have a default value?
If the service trusts the device, then it will trust a user vouched for by the device
If the Service trusts the user, then it doesn’t necessarily matter what device is being used
Override by device policy
Override by user device list
SAML<br><br>NAC/IDS<br><br>SSL Certificates/HTTPS<br><br>User Login<br><br>OpenID