Security for Cloud and Mobile
  Authentication
    User
      Remote Authentication
      Security Token
        X.509
    Device
      Security Token
        X.509
      NAC/TNC/NAP
    Service
      Security Token
        X.509
      NAC/TNC/NAP
    SAML
      XML elements
      Assertions
        Authentication request
        Attributes
        Authorization Statement
      Protocol
        Assertion Request
        Assertion response
      Profiles
    Authorities
      LDAP Directory
      Certificate Authorities
      Active Directory
      OpenDirectory
      OpenID
      NIS
      PAM
      RADIUS/DIAMETER
      Key Distribution Center
    Authentication factors
      Telecom Carrier
      Telecom Network operator
        NIC
        Phone service
  Identification
    User
      Something you are
        biometrics
        geoLocation
      Something you Have
        x.509 Certificate
        Common Access Card
        smartID
          enhanced ID
          Passport
      look at LDAP User schema
      Something you know
        User Name
          Domain
        User UUID
        OpenID
        email address
        phone number
      Proximity
    SAML
      XML elements
    Device
      Mobile device
        MEID
        IMEI
        Carrier
      UUID
      Bonjour
      DNS Entry
      Web Service for Devices (UUID)
      MAC Address
      x.509
      Registered Device ID
      IP Address
      geoLocation
      phone number
      Proximity
    Service
      URL
      UUID
      WS-Addressing
      Bonjour
      DNS
      IP Address
      MAC Address
      geoLocation
      x.509
      email address
      phone number
      Proximity
  Document Security
    Document Tracing
      User
      Destination
      source
      Location
      Time
    Encryption Method
    Authentication Credentials
    Document Classification
      Level
      Handling
    Document identification
      Bates stamp
      Document UUID
      Watermarks
  Security Federations
    Job Forwarding Relationship for logging?
    SAML
      Single Sign On
      XML elements
    WS-Federation
  Current standards
    SAML
    NAC/IDS
    SSL Certificates/HTTPS/TLS
    OpenID
    WS-Security/WS-Federation
    XACML
    Web Services for Devices
    Bonjour
  MFD Security Ticket
  Authorization
    Subjects
      Users
      Group
      Device
      Service
      Federations
      Device/Service/Job Owner
      Role
        Admin
        User
        Maintenance
        Operator
        Guest
    Environment
      Date/Time
      geoLocation
        External
        Branch Office
        Mobile
        Country
        Continent
        Locality (City, County, State, Campus)
      Priority
      Energy Policies
      Proximity
      Organisational Location
    Policy Attributes
    Resources
      Device Settings
        Energy settings
        Discoverable
        Registerable
        Configuration
          Edit user info
(password, Department, account codes, etc)
      Resources
        Local Storage
        External Storage
          HardDisk
          ramDisk
          CD
          DVD
          NetworkStorage
          floppyDisk
        Remote (cloud) Storage
      Document Security
        Document Encryption
        Transport Encryption (cheap document encryption)
        Document Signature
      Document Format
        doc
        ppt
        txt
        pdf
        image
      Interpreter
        LangPCL
        LangPS
        LangXPS
        LangPDF
      Job Options
        Multiple Document support
        Job Routing
        Duplex
          LongEdge
          ShortEdge
        Workflow
      Device Subunits
        InputChannel
          SerialPort
          ParallelPort
          IEEE1284Port
          LPDServer
          Port9100
          AppSocket
          FTP
          TFTP
          Fax Modem
          IEEE1394
          ServerMessageBlock
          USB
          IRDA
          PortTCP
          PortUDP
          PortHTTP
          IPP
          SMTP
          POP
          IMAP
        Output Channel
          SerialPort
          ParallelPort
          IEEE1284Port
          SCSIPort
          FTP
          TFTP
          IEEE1394
          ServerMessageBlock
          USB
          PortTCP
          PortHTTP
          Fax Modem
          SMTP
        Interface
          Control
      Services
      Device Capabilities
        Input Tray
          SheetFeedAutoRemovableTray
          SheetFeedAutoNonRemovableTray
          SheetFeedManual
          ContinuousRoll
          ContinuousFanFold
        Output Tray
          Bottom
          Center
          FaceDown
          FaceUp
          LargeCapacity
          Left
          Middle
          MyMailbox
          Rear
          Right
          Side
          Top
        Console
          Read
          Write
          Customize
        Marker
          Color
          Monochrome
        Scan Media Path
          Platen
          Feeder
          Manual
        Finishers
          Stitcher
          Folder
          Binder
          Trimmer
          DieCutter
          Puncher
          MakeEnvelope
          Stacker
          Collate
        Scanner
      External Services
        Transform services
    Actions
      Copy
      EmailIn
      EmailOut
      FaxIn
        Net
        PSTN
      FaxOut
        Net
        PSTN
      Print
      Scan
      Manage
      Service/Job Operations
        AddHardcopyDocument
        CancelDocument
        CancelJob
        CancelJobs
        CancelCurrentJob
        CancelMyJobs
        CloseJob
        CreateJob
        DisableService
        EnableService
        GetDocumentElements
        GetDocuments
        GetJobElements
        GetJobHistory
        GetServiceElements
        GetActiveJobs
        HoldJob
        HoldNewJobs
        PauseService
        PauseServiceAfterCurrentJob
        PromoteJob
        ReleaseJob
        ReleaseNewJobs
        RestartService
        ResubmitJob
        ResumeJob
        ResumeService
        SendDocument
        SendURI
        SetDocumentElements
        SetJobElements
        SetServiceElements
        ShutdownService
        StartupService
        SuspendCurrentJob
      Transform
    XACML
      Request
        Subject
        Action
        Environment
        Resource
      Response
        Decision
          Permit
          Deny
          Indeterminiate
          NotApplicable
        Status
        Obligations
      PolicySet
        SetDefaults
        Target
          Subject
          Resources
          Actions
          Environment
        Obligations
    Policy Sets
      Administrator
      IPP operations
      Operator
      Maintenance
      Device/Service/Job Owner
    SAML
      XML elements
Is the user who they say they are?
Do we know this device?Security Tokenr
CDMA Mobile Equipment Identifier
GSM International Mobile Equipment Identifier
i.e. WSD device quid
Used by all Apple devices
Need to know where a service is located for security reasons. Do not want to send classified document through services in "hostile" countries. Also need to be aware of copyright restriction sand lax copyright support.
Note for cloud in general - cloud documents need an expiration date/time value for when they are to be deleted if not retrieved - should service also have a default value?
If the service trusts the device, then it will trust a user vouched for by the device
If the Service trusts the user, then it doesn’t necessarily matter what device is being used
Override by device policy
Override by user device list
SAML<br><br>NAC/IDS<br><br>SSL Certificates/HTTPS<br><br>User Login<br><br>OpenID