User:Infinity Linden/OGP Trust Model - Revision history

Saijanai Kuhn: /* External References */

2009-01-18T22:45:43Z

External References

← Older revision		Revision as of 15:45, 18 January 2009
Line 219:		Line 219:
	* '''todo:''' add reference to shared secret best common practices		* '''todo:''' add reference to shared secret best common practices

			[[Category: Pyogp]]
			[[Category:Pyogp_Kitchen_Sink]]
	[[Category:AW Groupies]]		[[Category:AW Groupies]]
	[[Category:Grid Interoperability]]		[[Category:Grid Interoperability]]
	[[Category:AW Groupies User Pages]]		[[Category:AW Groupies User Pages]]

Saijanai Kuhn: /* External References */

2008-10-01T15:43:11Z

External References

← Older revision		Revision as of 08:43, 1 October 2008
Line 219:		Line 219:
	* '''todo:''' add reference to shared secret best common practices		* '''todo:''' add reference to shared secret best common practices

	[[Category:~~AW_Groupies~~]]		[[Category:AW Groupies]]
	[[Category:~~Grid_Interoperability~~]]		[[Category:Grid Interoperability]]
			[[Category:AW Groupies User Pages]]

Infinity Linden at 19:30, 12 September 2008

2008-09-12T19:30:04Z

@@ Line 1: / Line 1: @@
 <blockquote class="templatequote">
 <div>
@@ Line 9: / Line 5: @@
 <div class="templatequotecite">—<cite>John Steven (noted internet security expert)</cite></div>
 </blockquote>
 =Introduction=

Latha Serevi at 23:19, 9 September 2008

2008-09-09T23:19:46Z

← Older revision		Revision as of 16:19, 9 September 2008
Line 210:		Line 210:
	* [https://wiki.secondlife.com/wiki/User:Infinity_Linden/OGP_Trust_Model_UseCases Trust Model Use Cases]		* [https://wiki.secondlife.com/wiki/User:Infinity_Linden/OGP_Trust_Model_UseCases Trust Model Use Cases]
	* [https://wiki.secondlife.com/wiki/AWG:_Cross_Domain_Trust_issues AWG: Cross Domain Trust Issues] (old?)		* [https://wiki.secondlife.com/wiki/AWG:_Cross_Domain_Trust_issues AWG: Cross Domain Trust Issues] (old?)
			* [https://wiki.secondlife.com/wiki/User:Latha_Serevi/OGP_trust_proposal_based_on_secure_groups Latha's "OGP trust proposal based on secure groups"]

	=External References=		=External References=
Line 218:		Line 219:
	[[Category:AW_Groupies]]		[[Category:AW_Groupies]]
	[[Category:Grid_Interoperability]]		[[Category:Grid_Interoperability]]
	~~https://wiki.secondlife.com/wiki/User:Latha_Serevi/OGP_trust_proposal_based_on_secure_groups~~

Latha Serevi: /* External References */

2008-09-09T23:17:09Z

External References

← Older revision		Revision as of 16:17, 9 September 2008
Line 218:		Line 218:
	[[Category:AW_Groupies]]		[[Category:AW_Groupies]]
	[[Category:Grid_Interoperability]]		[[Category:Grid_Interoperability]]
			https://wiki.secondlife.com/wiki/User:Latha_Serevi/OGP_trust_proposal_based_on_secure_groups

Dale Innis: /* See Also */ OGP link

2008-08-28T18:48:28Z

Dale Innis: /* Language Bindings for Occam */ Add See Also major section

2008-08-21T13:27:14Z

Language Bindings for Occam: Add See Also major section

← Older revision		Revision as of 06:27, 21 August 2008
Line 205:		Line 205:

	(See discussion [https://wiki.secondlife.com/wiki/User:Zero_Linden/Office_Hours/2008_August_19 here].)		(See discussion [https://wiki.secondlife.com/wiki/User:Zero_Linden/Office_Hours/2008_August_19 here].)

			=See Also=
			* [https://wiki.secondlife.com/wiki/User:Infinity_Linden/OGP_Trust_Model_UseCases Trust Model Use Cases]
			* [https://wiki.secondlife.com/wiki/AWG:_Cross_Domain_Trust_issues AWG: Cross Domain Trust Issues] (old?)

	=External References=		=External References=

Dale Innis: /* Content Creator */ add modification to content integrity

2008-08-21T13:19:44Z

Content Creator: add modification to content integrity

← Older revision		Revision as of 06:19, 21 August 2008
Line 43:		Line 43:
	These are users who derive an income stream from Second Life. In addition to interests of traditional End Users, Content Creators also have these interests:		These are users who derive an income stream from Second Life. In addition to interests of traditional End Users, Content Creators also have these interests:

	* '''content integrity''' - content creators want to know that content they create cannot be illicitly duplicated, lost or stolen		* '''content integrity''' - content creators want to know that content they create cannot be illicitly duplicated, modified, lost or stolen

	==Corporate IT and ISP Operations==		==Corporate IT and ISP Operations==

Dale Innis: /* Establishing Trust with a Peer Administrative Domain */ Language Bindings for Occam

2008-08-20T18:13:54Z

Establishing Trust with a Peer Administrative Domain: Language Bindings for Occam

← Older revision		Revision as of 11:13, 20 August 2008
Line 201:		Line 201:

	For instance, there is no technical technique to ensure the operator of a region domain is not making illicit copies of your inventory when your avatar rezzes in regions they control.		For instance, there is no technical technique to ensure the operator of a region domain is not making illicit copies of your inventory when your avatar rezzes in regions they control.

			==Language Bindings for Occam==

			(See discussion [https://wiki.secondlife.com/wiki/User:Zero_Linden/Office_Hours/2008_August_19 here].)

	=External References=		=External References=

Dale Innis: /* Third Party Web Service Operators */ Protocol implications / online vs. offline

2008-08-13T20:38:01Z

Third Party Web Service Operators: Protocol implications / online vs. offline

← Older revision		Revision as of 13:38, 13 August 2008
Line 79:		Line 79:
	* '''limitation of sensitive data''' - the system should not REQUIRE third parties to handle sensitive information		* '''limitation of sensitive data''' - the system should not REQUIRE third parties to handle sensitive information

			=Protocol Implications=

			Notes on the implications of the trust model for the design of the relevant parts of the Open Grid Protocol

			==Online vs. Offline Information==

			In considering how the OGP should satisfy the various requirements of the trust model, we need to consider what information must or should flow 'online' (i.e. as part of the communications specified by the protocol), and what must or should be set 'offline' (i.e. outside of the protocol, typically as a static change to the configuration or local data files of a domain server or client).

			In establishing trust between an Agent Domain and a Region Domain, for instance, we can imagine two rather different styles:

			* Online trust establishment involves significant communication or negotiation via the protocol, at runtime. For instance, a Region Domain R might be statically configured to trust what a particular Application Domain A says about itself, and then when A contacts R to carry out some interop activity, the two would mutually authenticate, A would describe itself to R in some standard way, and R would then decide whether or not it ought to interact with A in the particular case. On the other hand,
			* Offline trust establishment assumes that most of the interoperation decisions are made in advance, outside the protocol, and the main function of the protocol in trust-establishment is simply authentication. For instance, a Region Domain R might be statically configured with a list of the kinds of interop activities it should allow with an application domain A (allowing A's residents to rez, allowing them to bring inventory of various types with them, accepting their profile information for display to other residents present in R, etc). Then when A contacts R to carry out some activity, the two would mutually authenticate, and (without any further protocol interaction on the subject) R would simply look up the activity in the list of things it's allowed to do with A in order to decide whether to proceed.

			Online trust establishment allows for more flexible and automatic operation; on the other hand it is more complex, more error-prone, and requires more standardization and more protocol complexity. Offline trust establishment is more static, but also simpler at runtime and (probably?) less prone to error and exploitable bugs. OGP will probably have elements of both online and offline trust establishment. (Although we might want to start heavily offline, since that's easier? -- [[User:Dale Innis\|Dale Innis]] 13:38, 13 August 2008 (PDT))

	=Security Objectives=		=Security Objectives=

← Older revision		Revision as of 11:48, 28 August 2008
Line 207:		Line 207:

	=See Also=		=See Also=
			* [[Open Grid Protocol]]
	* [https://wiki.secondlife.com/wiki/User:Infinity_Linden/OGP_Trust_Model_UseCases Trust Model Use Cases]		* [https://wiki.secondlife.com/wiki/User:Infinity_Linden/OGP_Trust_Model_UseCases Trust Model Use Cases]
	* [https://wiki.secondlife.com/wiki/AWG:_Cross_Domain_Trust_issues AWG: Cross Domain Trust Issues] (old?)		* [https://wiki.secondlife.com/wiki/AWG:_Cross_Domain_Trust_issues AWG: Cross Domain Trust Issues] (old?)