Security for Cloud and Mobile
  Identification
    User
      Something you are
        biometrics
        geoLocation
      Something you Have
        x.509 Certificate
        Common Access Card
        smartID
          enhanced Dl
          Passport
      Something you know
        User Name
          Domain
        User UUID
        OpenID
        email address
        phone number
      Proximity
    Device
      Mobile device
        MEID
        IMEI
        Carrier
      UUID
      Bonjour
      DNS Entry
      Web Service for Devices (UUID)
      MAC Address
      x.509
      Registered Device ID
      IP Address
      geoLocation
      phone number
      Proximity
    Service
      URL
      UUID
      WS-Addressing
      Bonjour
      DNS
      IP Address
      MAC Address
      geoLocation
      x.509
      email address
      phone number
      Proximity
    look at LDAP User schema
  Authentication
    User
      Remote Authentication
      Security Token
        X.509
    Device
      Security Token
        X.509
      NAC/TNC/NAP
    Service
      Security Token
        X.509
      NAC/TNC/NAP
    Authorities
      LDAP Directory
      Certificate Authorities
      Active Directory
      OpenDirectory
      OpenID
      NIS
      PAM
      RADIUS/DIAMETER
      Key Distribution Center
    Authentication factors
      Telecom Carrier
      Telecom Network operator
        NIC
        Phone service
  Authorization
    User
      User Policies
        Location based
        Physical Access
        Allowable operations
    Device
      Device Policies
        Device Location
    Service
    Authorization Predicates
  Document Security
    Document Tracing
      User
      Destination
      source
      Location
      Time
    Encryption Method
    Authentication Credentials
    Document Classification
      Level
      Handling
    Document identification
      Bates stamp
      Document UUID
      Watermarks
  Security Federations
    Job Forwarding Relationship for logging?
  Current standards
    SAML
    NAC/IDS
    SSL Certificates/HTTPS/TLS
    OpenID
    WS-Security/WS-Federation
    XACML
    Web Services for Devices
    Bonjour
  MFD Security Ticket
CDMA Mobile Equipment Identifier
GSM International Mobile Equipment Identifier
i.e. WSD device quid
Used by all Apple devices
Is the user who they say they are?
Do we know this device?Security Tokenr
Is the user allowed to do what they’re trying to do?
Is the requested operation allowed on this device?
How do we determine what is allowed?
Is any device from this location (i.e. country) allowed to have access?
Note for cloud in general - cloud documents need an expiration date/time value for when they are to be deleted if not retrieved - should service also have a default value?
If the service trusts the device, then it will trust a user vouched for by the device
If the Service trusts the user, then it doesn’t necessarily matter what device is being used
Override by device policy
Override by user device list
SAML<br><br>NAC/IDS<br><br>SSL Certificates/HTTPS<br><br>User Login<br><br>OpenID