Insu Eid 20111018
•Download as ODP, PDF•
1 like•1,345 views
This document summarizes Belgium's electronic ID card system. It discusses the components of the system including the ID card itself, middleware, an authentication service, a new browser-based architecture using an applet, an identity provider, a trust service, a Drupal module, and a digital signature service. It also provides examples of applications that use the electronic ID card system and references for further information.
Report
Share
Report
Share
Recommended
G.k
Digital certificates function like passports to verify a user's identity by binding a unique key to information including the certificate authority name, expiration date, and identity number. Individuals must first obtain digital certificates in order to access community right to know data, and the certificates can then be cross-referenced with other security databases to monitor individuals.
Patterns and Antipatterns in Enterprise Security
To view recording of this webinar please use below URL:
Attacks against information systems is on the rise making enterprise security a major concern. It’s important to identify and address security needs such as confidentiality, integrity, availability and auditability of information. Enterprise security patterns facilitate balanced and informed decisions about security needs, as well as provide a rationale for the evolution of security needs over time. Antipatterns, which are fostered by misapplications of concepts and misunderstandings of security concerns, should be avoided. Enterprise security patterns and antipatterns solve these security concerns by addressing recurrent problems and challenges. These security patterns facilitate balanced and informed decisions about security needs, avoid the misapplication of concepts and misunderstanding of security concerns and provide a rationale for evolution of security needs over time.
This webinar will
Deep dive into enterprise security patterns and antipatterns
Explore the importance of using them
Discuss how to apply them with WSO2 Identity Server
The Hong Kong Public Key Infrastruture 2010
The document discusses the Hong Kong Public Key Infrastructure (PKI) and its use. It provides an overview of PKI and how it establishes trust and security for electronic transactions through the use of public/private key encryption, digital certificates, and certificate authorities (CAs). It outlines Hong Kong's legal framework that recognizes PKI through the Electronic Transactions Ordinance and the voluntary recognition scheme for CAs operating in Hong Kong like Hongkong Post and Digi-Sign Certification Service.
Session 10 Tp 10
Public Key Infrastructure (PKI) uses public and private key cryptography to authenticate users and devices. Digital certificates, issued by a Certificate Authority (CA), bind a public key to a user's identity. Enterprise CAs issue certificates only to internal users while stand-alone CAs can issue to external users. Active Directory, a Windows directory service, enables single sign-on access to network resources and authenticates external users without an Active Directory account.
Projects Handled_Bank Of Baroda
The document summarizes two projects handled by the individual:
1. The BOB Biometric Solution project from Dec 2014-Apr 2015 where the individual served as the Module Lead on a team of 7 to implement a biometric fingerprint authentication system for logging into the Core Banking Solution at BOB branches in West Bengal.
2. The E-KYC Aadhar project from Mar-July 2015 where the individual again served as the Module Lead on a team of 5 to implement an identity authentication system using fingerprint scans to validate customer identities and enable account openings through business correspondents in rural areas.
SAML VS OAuth 2.0 VS OpenID Connect
SAML, OAuth 2.0, and OpenID Connect are the three most common authentication protocols. SAML provides authentication and authorization assertions while OAuth 2.0 focuses on authorization. OpenID Connect builds on OAuth 2.0 by adding authentication features and using claims to provide user information. It has a lower implementation barrier than SAML and is well-suited for mobile and API use cases. The document compares the protocols and their applications, security considerations, and history of adoption.
Multi-Factor Authentication & Authorisation
Attackers are increasingly targeting external users like customers and partners in addition to employees. Multi-factor authentication (MFA) and authorization should be used to verify both internal and external users' identities beyond just a username and password. The Ubisecure Identity Platform supports MFA and authorization across web, mobile, and legacy applications to provide secure and convenient login experiences for external users through different authentication methods.
A4でまとめるClean architecture概要
This document outlines the architecture of a software system. It includes layers for application business rules, domain logic, use cases, controllers, presenters and interfaces that allow external devices and users to interact with the system through various gateways and a user interface. Key components are the domain model, use cases, controllers and presenters that facilitate information flow between different system layers and interfaces.
Recommended
G.k
Digital certificates function like passports to verify a user's identity by binding a unique key to information including the certificate authority name, expiration date, and identity number. Individuals must first obtain digital certificates in order to access community right to know data, and the certificates can then be cross-referenced with other security databases to monitor individuals.
Patterns and Antipatterns in Enterprise Security
To view recording of this webinar please use below URL:
Attacks against information systems is on the rise making enterprise security a major concern. It’s important to identify and address security needs such as confidentiality, integrity, availability and auditability of information. Enterprise security patterns facilitate balanced and informed decisions about security needs, as well as provide a rationale for the evolution of security needs over time. Antipatterns, which are fostered by misapplications of concepts and misunderstandings of security concerns, should be avoided. Enterprise security patterns and antipatterns solve these security concerns by addressing recurrent problems and challenges. These security patterns facilitate balanced and informed decisions about security needs, avoid the misapplication of concepts and misunderstanding of security concerns and provide a rationale for evolution of security needs over time.
This webinar will
Deep dive into enterprise security patterns and antipatterns
Explore the importance of using them
Discuss how to apply them with WSO2 Identity Server
The Hong Kong Public Key Infrastruture 2010
The document discusses the Hong Kong Public Key Infrastructure (PKI) and its use. It provides an overview of PKI and how it establishes trust and security for electronic transactions through the use of public/private key encryption, digital certificates, and certificate authorities (CAs). It outlines Hong Kong's legal framework that recognizes PKI through the Electronic Transactions Ordinance and the voluntary recognition scheme for CAs operating in Hong Kong like Hongkong Post and Digi-Sign Certification Service.
Session 10 Tp 10
Public Key Infrastructure (PKI) uses public and private key cryptography to authenticate users and devices. Digital certificates, issued by a Certificate Authority (CA), bind a public key to a user's identity. Enterprise CAs issue certificates only to internal users while stand-alone CAs can issue to external users. Active Directory, a Windows directory service, enables single sign-on access to network resources and authenticates external users without an Active Directory account.
Projects Handled_Bank Of Baroda
The document summarizes two projects handled by the individual:
1. The BOB Biometric Solution project from Dec 2014-Apr 2015 where the individual served as the Module Lead on a team of 7 to implement a biometric fingerprint authentication system for logging into the Core Banking Solution at BOB branches in West Bengal.
2. The E-KYC Aadhar project from Mar-July 2015 where the individual again served as the Module Lead on a team of 5 to implement an identity authentication system using fingerprint scans to validate customer identities and enable account openings through business correspondents in rural areas.
SAML VS OAuth 2.0 VS OpenID Connect
SAML, OAuth 2.0, and OpenID Connect are the three most common authentication protocols. SAML provides authentication and authorization assertions while OAuth 2.0 focuses on authorization. OpenID Connect builds on OAuth 2.0 by adding authentication features and using claims to provide user information. It has a lower implementation barrier than SAML and is well-suited for mobile and API use cases. The document compares the protocols and their applications, security considerations, and history of adoption.
Multi-Factor Authentication & Authorisation
Attackers are increasingly targeting external users like customers and partners in addition to employees. Multi-factor authentication (MFA) and authorization should be used to verify both internal and external users' identities beyond just a username and password. The Ubisecure Identity Platform supports MFA and authorization across web, mobile, and legacy applications to provide secure and convenient login experiences for external users through different authentication methods.
A4でまとめるClean architecture概要
This document outlines the architecture of a software system. It includes layers for application business rules, domain logic, use cases, controllers, presenters and interfaces that allow external devices and users to interact with the system through various gateways and a user interface. Key components are the domain model, use cases, controllers and presenters that facilitate information flow between different system layers and interfaces.
Beyond pdfgarnett2011
presentation delivered on behalf of the Public Knowledge Project (http://pkp.sfu.ca) at Beyond the PDF in San Diego, January 2011.
Creative Commons search
Creative Commons resources can be searched online to find images, videos, music and other media that are licensed for both commercial and non-commercial use. Flickr is a photo sharing site that allows users to upload and share photos under various Creative Commons licenses. When using Creative Commons resources, proper attribution is required, including citing the source, title, creator and license conditions. Videos from sites like YouTube and Zoopy can help explain complex issues and spread information, while the Internet Archive provides a repository of public domain materials.
Wind energy
Wind energy is generated from the kinetic energy of wind. Wind turbines convert the kinetic energy of wind into electrical energy. There are two main types of wind turbines: horizontal-axis turbines which have three blades and stand around 20 stories tall, and vertical-axis turbines which resemble an eggbeater and stand around 100 feet tall. Wind turbines are often located in windy areas like hilltops, plains, and shorelines, and are grouped together in wind farms to generate electricity from wind power.
Yahoo! Hack University: Accessibility Innovations and Challenges
Are you an accessibility advocate or champion? This presentation introduces steps to make your applications and web sites accessible. It also challenges us to create the future accessibility solutions.
It was created for the Yahoo! Hack University event at the University of Washington by Ted Drake, from the Yahoo! Accessibility Lab.
Copyright, Fair Use, and Creative Commons
This document discusses copyright, fair use, and Creative Commons licensing. It provides an overview of fair use guidelines for educators, including that educators can make copies of copyrighted works for educational purposes and that learners can use copyrighted works to create new materials. It also discusses transformative use as a type of fair use when copyrighted materials are modified or placed in a new context. Finally, it lists several resources for finding images, sounds, and lessons about copyright information.
Luxury marketing outlook_2013
This document provides an overview and outlook on luxury marketing trends for 2013. Some of the key points discussed include:
- Digital marketing, especially through social media, mobile integration, and ecommerce/mobile commerce, will be increasingly important but the store experience remains core.
- Marketers will focus on enhancing the brand experience across channels using technology, like mobile apps that provide tailored content depending on location.
- Storytelling through high-quality brand content online and in print publications will help assert expertise and immerse consumers in the brand world.
- Social media will take on a greater role in driving online sales as platforms integrate more commerce capabilities.
- Consistent branding and messaging across all channels, including interactive and personalized
Identity Federation on JBossAS
The document discusses implementing a high availability identity federation system on JBoss Application Server (JBossAS). It proposes using JBossAS clustered across nodes for both identity providers and service providers. Key aspects are supporting standards like SAML and Liberty Alliance for identity federation and single sign-on. High availability features like persistence, failover, autodiscovery and security are important to support a distributed system with many users.
Re-using existing PKIs for online Identity Management
The document discusses using existing public key infrastructure (PKI) from electronic passports to enable online identity management according to Identity 2.0 standards. It describes how an Identity Provider could verify a user's passport remotely by performing authentication and accessing standardized data groups. Attributes from the passport like date of birth could then be translated to be more privacy-friendly before being shared with a Relying Party. Combining offline and online identity management allows flexibility in privacy protection while leveraging widespread government PKI systems.
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...Paris Open Source Summit
#Cloud , #DevOps & Infrastructure - Track - Cloud Native Infrastructure
When deploying microservices, you need to provide a solution for authentication and authorization so you can control who is using your service.
A lot of possibilities exist, but often involves development inside microservice code. Using a Single-Sign On software is another way to achieve the mircoservice protection, either using OAuth2/OpenID Connect protocol, either using a SSO specific protocol.
We sill demonstrate how this can work with LemonLDAP::NG, a free/open source SSO software mostly developed in France.[POSS 2019] MicroServices authentication and authorization with LemonLDAP::NG
LemonLDAP::NG is an open source software that provides single sign-on and identity federation capabilities. It allows users to authenticate once and access multiple applications securely. It supports standards like CAS, SAML and OpenID Connect for authentication. LemonLDAP::NG also provides ways to protect APIs and web services using tokens validated by handlers. It has been an OW2 project since 2003 and supports protocols for federation between identity providers.
Identity 2.0 and User-Centric Identity
This document discusses identity management concepts including Identity 2.0, user-centric identity, and how these apply to web services. It provides an overview and comparison of OpenID and Windows CardSpace as examples of user-centric identity solutions. It also summarizes an eFA project for federating access to medical records across health providers in Germany.
ePassport reloaded goes mobile
The document summarizes recent developments in ePassport technology and associated security issues. It discusses how ePassport chips can now be cloned using an NFC-enabled mobile phone, bypassing authentication mechanisms. It also demonstrates attacks such as manipulating chip data indexes and generating self-signed certificates to impersonate countries. The document calls for open standards, more secure implementations, and global coordination to address vulnerabilities.
Authentication and strong authentication for Web Application
Sylvain Maret is a digital security expert who gave a presentation on strong authentication in web applications. He discussed threats to authentication like keyloggers and social engineering. New standards like FFIEC and PCI DSS require strong authentication for financial applications and remote access. Strong authentication can use biometrics or one-time passwords. Standards like SAML and OpenID allow for identity federation where users can authenticate with an identity provider and access multiple applications.
Multiple credentials-in-the-enterprise
This document discusses two-factor authentication in enterprises and outlines a vision for a "united" enterprise multi-credential system. It claims that using a single enterprise credential does not fully address authentication needs due to technical and privacy limitations. Currently, different two-factor authentication schemes like OTP, PKI, and CardSpace are managed separately, making unified deployment difficult. The presented vision is based on work on KeyGen2, which would allow an entity to issue and manage multiple user credentials through a single provisioning step, while each credential is optimized for specific use cases. This could offer users multiple authentication options through a single interface.
Make the Smartcard great again
This document discusses making smartcards more useful for security applications by building a trust layer between blockchains and the physical world. It proposes using secure elements like smartcards combined with secure microcontrollers to create cryptographically authenticated hardware security tokens. These devices would allow installing applications securely, authenticating to blockchains, and improving on smartcard limitations regarding developers and auditing. Examples given include the Ledger Nano S hardware wallet and plans to implement bitcoin, ethereum, and other cryptocurrency applications as well as password management and OpenPGP.
The bits and pieces of Azure AD B2C
Slide deck from Azure Saturday Munich 2019. Describing basics of online identity management and federation. But also capabilities of Azure AD B2C - from open standards protocols support (like OAuth and OpenID Connect) to building complex identity flows with Identity Experience Framework
Mini-Training: SSO with Windows Identity Foundation
An introduction to the principles of SSO and a comparison between 2 implementations: SAML and Open Id
Self isssued-idp
This document discusses a self-issued open ID provider that allows identity in devices without central identity provider servers. It generates ID tokens on the device using a self-signed key pair stored securely on the device. The subject ("sub") claim in the ID token is calculated from the public key. This allows each device to have a unique ID token tied to the key pair, with no need for client registration or API access tokens.
Strong Authentication in Web Application #SCS III
Swiss Cyber Storm 3 Security Conference / OWASP Track
Strong Authentication: State of the Art 2011
Risk Based Authentication
Biometry - Match on Card
OTP for Smartphones
OTP SMS
PKI
SuisseID
Mobile-OTP
OATH (HOTP, TOTP, OCRA)
Open Source approach
How to integrate Strong Authentication in Web Application?
OpenID, SAML, Identity Federation for Strong Authentication
API, SDK, Agents, Web Services, Modules
PAM, Radius, JAAS
Reverse Proxy (WAF) and WebSSO
PKI / SSL client authentication
PHP example with Multi-OTP PHP class
AppSec (Threat Modeling - OWASP)
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)Richard Bullington-McGuire
Richard Bullington-McGuire presented this talk on PKI enabling web applications for the DoD at the 2009 MIL-OSS conference:
http://www.mil-oss.org/
It is a case study that shares some of the challenges and solutions surrounding the implementation of the Forge.mil system.OpenID Connect 4 SSI (DIFCon F2F)
OpenID Connect 4 SSI aims at specifying a set of protocols based on OpenID Connect to enable SSI applications. The initiative is conducted at OpenID Foundation in liaison with the Decentralized Identity Foundation (DIF). One of the specifications is built up on DID-SIOP in DIDAuth WG in DIF and SIOP v1 in OIDC Core.
finance flyer
This document provides information about Chetu's finance industry services and technical skills. Chetu has deep experience developing and supporting applications for payment processing, mortgage, insurance, and banking. They can develop POS systems, ecommerce plugins, mobile payments, and merchant/ISO portals. Chetu also has skills in a wide range of technologies including .NET, PHP, Java, mobile development, and business intelligence tools. Their low-cost model saves more than 50-75% compared to traditional models.
More Related Content
Viewers also liked
Beyond pdfgarnett2011
presentation delivered on behalf of the Public Knowledge Project (http://pkp.sfu.ca) at Beyond the PDF in San Diego, January 2011.
Creative Commons search
Creative Commons resources can be searched online to find images, videos, music and other media that are licensed for both commercial and non-commercial use. Flickr is a photo sharing site that allows users to upload and share photos under various Creative Commons licenses. When using Creative Commons resources, proper attribution is required, including citing the source, title, creator and license conditions. Videos from sites like YouTube and Zoopy can help explain complex issues and spread information, while the Internet Archive provides a repository of public domain materials.
Wind energy
Wind energy is generated from the kinetic energy of wind. Wind turbines convert the kinetic energy of wind into electrical energy. There are two main types of wind turbines: horizontal-axis turbines which have three blades and stand around 20 stories tall, and vertical-axis turbines which resemble an eggbeater and stand around 100 feet tall. Wind turbines are often located in windy areas like hilltops, plains, and shorelines, and are grouped together in wind farms to generate electricity from wind power.
Yahoo! Hack University: Accessibility Innovations and Challenges
Are you an accessibility advocate or champion? This presentation introduces steps to make your applications and web sites accessible. It also challenges us to create the future accessibility solutions.
It was created for the Yahoo! Hack University event at the University of Washington by Ted Drake, from the Yahoo! Accessibility Lab.
Copyright, Fair Use, and Creative Commons
This document discusses copyright, fair use, and Creative Commons licensing. It provides an overview of fair use guidelines for educators, including that educators can make copies of copyrighted works for educational purposes and that learners can use copyrighted works to create new materials. It also discusses transformative use as a type of fair use when copyrighted materials are modified or placed in a new context. Finally, it lists several resources for finding images, sounds, and lessons about copyright information.
Luxury marketing outlook_2013
This document provides an overview and outlook on luxury marketing trends for 2013. Some of the key points discussed include:
- Digital marketing, especially through social media, mobile integration, and ecommerce/mobile commerce, will be increasingly important but the store experience remains core.
- Marketers will focus on enhancing the brand experience across channels using technology, like mobile apps that provide tailored content depending on location.
- Storytelling through high-quality brand content online and in print publications will help assert expertise and immerse consumers in the brand world.
- Social media will take on a greater role in driving online sales as platforms integrate more commerce capabilities.
- Consistent branding and messaging across all channels, including interactive and personalized
Viewers also liked (6)
Yahoo! Hack University: Accessibility Innovations and Challenges
Yahoo! Hack University: Accessibility Innovations and Challenges
Similar to Insu Eid 20111018
Identity Federation on JBossAS
The document discusses implementing a high availability identity federation system on JBoss Application Server (JBossAS). It proposes using JBossAS clustered across nodes for both identity providers and service providers. Key aspects are supporting standards like SAML and Liberty Alliance for identity federation and single sign-on. High availability features like persistence, failover, autodiscovery and security are important to support a distributed system with many users.
Re-using existing PKIs for online Identity Management
The document discusses using existing public key infrastructure (PKI) from electronic passports to enable online identity management according to Identity 2.0 standards. It describes how an Identity Provider could verify a user's passport remotely by performing authentication and accessing standardized data groups. Attributes from the passport like date of birth could then be translated to be more privacy-friendly before being shared with a Relying Party. Combining offline and online identity management allows flexibility in privacy protection while leveraging widespread government PKI systems.
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...Paris Open Source Summit
#Cloud , #DevOps & Infrastructure - Track - Cloud Native Infrastructure
When deploying microservices, you need to provide a solution for authentication and authorization so you can control who is using your service.
A lot of possibilities exist, but often involves development inside microservice code. Using a Single-Sign On software is another way to achieve the mircoservice protection, either using OAuth2/OpenID Connect protocol, either using a SSO specific protocol.
We sill demonstrate how this can work with LemonLDAP::NG, a free/open source SSO software mostly developed in France.[POSS 2019] MicroServices authentication and authorization with LemonLDAP::NG
LemonLDAP::NG is an open source software that provides single sign-on and identity federation capabilities. It allows users to authenticate once and access multiple applications securely. It supports standards like CAS, SAML and OpenID Connect for authentication. LemonLDAP::NG also provides ways to protect APIs and web services using tokens validated by handlers. It has been an OW2 project since 2003 and supports protocols for federation between identity providers.
Identity 2.0 and User-Centric Identity
This document discusses identity management concepts including Identity 2.0, user-centric identity, and how these apply to web services. It provides an overview and comparison of OpenID and Windows CardSpace as examples of user-centric identity solutions. It also summarizes an eFA project for federating access to medical records across health providers in Germany.
ePassport reloaded goes mobile
The document summarizes recent developments in ePassport technology and associated security issues. It discusses how ePassport chips can now be cloned using an NFC-enabled mobile phone, bypassing authentication mechanisms. It also demonstrates attacks such as manipulating chip data indexes and generating self-signed certificates to impersonate countries. The document calls for open standards, more secure implementations, and global coordination to address vulnerabilities.
Authentication and strong authentication for Web Application
Sylvain Maret is a digital security expert who gave a presentation on strong authentication in web applications. He discussed threats to authentication like keyloggers and social engineering. New standards like FFIEC and PCI DSS require strong authentication for financial applications and remote access. Strong authentication can use biometrics or one-time passwords. Standards like SAML and OpenID allow for identity federation where users can authenticate with an identity provider and access multiple applications.
Multiple credentials-in-the-enterprise
This document discusses two-factor authentication in enterprises and outlines a vision for a "united" enterprise multi-credential system. It claims that using a single enterprise credential does not fully address authentication needs due to technical and privacy limitations. Currently, different two-factor authentication schemes like OTP, PKI, and CardSpace are managed separately, making unified deployment difficult. The presented vision is based on work on KeyGen2, which would allow an entity to issue and manage multiple user credentials through a single provisioning step, while each credential is optimized for specific use cases. This could offer users multiple authentication options through a single interface.
Make the Smartcard great again
This document discusses making smartcards more useful for security applications by building a trust layer between blockchains and the physical world. It proposes using secure elements like smartcards combined with secure microcontrollers to create cryptographically authenticated hardware security tokens. These devices would allow installing applications securely, authenticating to blockchains, and improving on smartcard limitations regarding developers and auditing. Examples given include the Ledger Nano S hardware wallet and plans to implement bitcoin, ethereum, and other cryptocurrency applications as well as password management and OpenPGP.
The bits and pieces of Azure AD B2C
Slide deck from Azure Saturday Munich 2019. Describing basics of online identity management and federation. But also capabilities of Azure AD B2C - from open standards protocols support (like OAuth and OpenID Connect) to building complex identity flows with Identity Experience Framework
Mini-Training: SSO with Windows Identity Foundation
An introduction to the principles of SSO and a comparison between 2 implementations: SAML and Open Id
Self isssued-idp
This document discusses a self-issued open ID provider that allows identity in devices without central identity provider servers. It generates ID tokens on the device using a self-signed key pair stored securely on the device. The subject ("sub") claim in the ID token is calculated from the public key. This allows each device to have a unique ID token tied to the key pair, with no need for client registration or API access tokens.
Strong Authentication in Web Application #SCS III
Swiss Cyber Storm 3 Security Conference / OWASP Track
Strong Authentication: State of the Art 2011
Risk Based Authentication
Biometry - Match on Card
OTP for Smartphones
OTP SMS
PKI
SuisseID
Mobile-OTP
OATH (HOTP, TOTP, OCRA)
Open Source approach
How to integrate Strong Authentication in Web Application?
OpenID, SAML, Identity Federation for Strong Authentication
API, SDK, Agents, Web Services, Modules
PAM, Radius, JAAS
Reverse Proxy (WAF) and WebSSO
PKI / SSL client authentication
PHP example with Multi-OTP PHP class
AppSec (Threat Modeling - OWASP)
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)Richard Bullington-McGuire
Richard Bullington-McGuire presented this talk on PKI enabling web applications for the DoD at the 2009 MIL-OSS conference:
http://www.mil-oss.org/
It is a case study that shares some of the challenges and solutions surrounding the implementation of the Forge.mil system.OpenID Connect 4 SSI (DIFCon F2F)
OpenID Connect 4 SSI aims at specifying a set of protocols based on OpenID Connect to enable SSI applications. The initiative is conducted at OpenID Foundation in liaison with the Decentralized Identity Foundation (DIF). One of the specifications is built up on DID-SIOP in DIDAuth WG in DIF and SIOP v1 in OIDC Core.
finance flyer
This document provides information about Chetu's finance industry services and technical skills. Chetu has deep experience developing and supporting applications for payment processing, mortgage, insurance, and banking. They can develop POS systems, ecommerce plugins, mobile payments, and merchant/ISO portals. Chetu also has skills in a wide range of technologies including .NET, PHP, Java, mobile development, and business intelligence tools. Their low-cost model saves more than 50-75% compared to traditional models.
Architecting io t solutions with microisoft azure ignite tour version
As a cloud architect one must be familiar with the pets vs cattle metaphor (Randy Bias & Bill Baker) – in the cloud, a VM is just another expandable resource! However, an IoT system may have to manage a huge number of devices, each one of them has a unique identity and a unique role. This is where the Pets vs Cattle metaphor fails – we need to handle pets in a cloud scale.
This lecture explains the complexity of the IoT problem domain and shows Azure SaaS and PaaS solution approaches: The Azure IoT Central and Azure IoT solution accelerators. We will be introduced to the Azure Device Provisioning Service (DPS) and see how it provides a scale approach to secure provisioning new IoT devices. We will explore the Azure IoT Hub and see its functional features and non-functional quality attributes such as security, scale, high-availability and health monitoring.
We will conclude the lecture with the future of IoT: "Smart Cloud and Intelligent edge" by presenting the Azure IoT Edge and Azure IoT Digital Twin.
Smart Card and Strong Cryptography for instant security
- OKsystem is a Prague-based software company with over 200 employees that provides cryptography and smart card solutions.
- They offer products like BABEL for encrypted messaging, OKsmart for smart card usage, and OKbase for key management, certificate management, and card management.
- Their solutions provide strong encryption using proven algorithms like AES and Diffie-Hellman to securely transmit and store encrypted messages and keys.
Security's Once and Future King
The document discusses smart cards and their use for web applications. It describes how smart cards can provide security functions like authentication and digital signatures. Traditionally, smart cards required specialized software and drivers. The document proposes a platform called SConnect that allows smart cards to be accessed from web applications using JavaScript. This is done through a lightweight browser extension and API that provides a standardized way for scripts to communicate with smart cards, enabling their use directly in web pages for two-factor authentication and other security functions.
The Belgian E Id Hacker Vs Developer
The document discusses the Belgian electronic identity (eID) card, including its physical structure, logical structure, content, and functionality for identification and authentication. It provides an overview of how the eID card can be integrated into web applications through an eID applet that handles secure communication with the card and supports multiple browsers and operating systems. Examples are given for using the eID applet to perform identification by reading identity files from the card.
Similar to Insu Eid 20111018 (20)
Re-using existing PKIs for online Identity Management
Re-using existing PKIs for online Identity Management
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...
#OSSPARIS19 - MicroServices authentication and authorization with LemonLDAP::...
[POSS 2019] MicroServices authentication and authorization with LemonLDAP::NG
[POSS 2019] MicroServices authentication and authorization with LemonLDAP::NG
Authentication and strong authentication for Web Application
Authentication and strong authentication for Web Application
Mini-Training: SSO with Windows Identity Foundation
Mini-Training: SSO with Windows Identity Foundation
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Architecting io t solutions with microisoft azure ignite tour version
Architecting io t solutions with microisoft azure ignite tour version
Smart Card and Strong Cryptography for instant security
Smart Card and Strong Cryptography for instant security
More from Bart Hanssens
OpenFed, a Drupal distribution
This document discusses OpenFed, a Drupal distribution created by BOSA, the Belgian Federal Public Service Policy and Support, to help administrations set up Drupal sites more easily. OpenFed is a selection of compatible modules that avoid maintenance issues and focus on features like multilingual support and privacy. BOSA hosts the sites, while external companies handle development and configuration. The distribution and BOSA's service model can be reused by other administrations. The document also briefly mentions Data.gov.be and exchanging data between portals using DCAT metadata standards.
Open Summer of Code in Belgium
Open Summer of Code is organized by Open Knowledge Belgium and sponsored by public and private sectors to have students get paid to work for about 3 weeks on real projects in teams of 3-5 people focusing on fields like ICT, communications, and design. The program emphasizes community, teamwork, coaching, project pitches, and training.
Open Belgium 2022: Prepare To Code
Brainstorm session on what to do with the open data sets on data.gov.be, e.g. organize a few open summer of code projects.
Werkgroep metadata: INSPIRE - DCAT-AP mapping
Kort overzicht mapping INSPIRE (geo) metadata naar DCAT-AP (open data) metadata formaat
Quarkus, Jib én OpenJ9
Korte inleiding tot RedHat Quarkus framework, Google JIB maven plugin en Eclipse OpenJ9 VM
Open Data at the Federal Level 2021
This document summarizes Belgium's efforts around open data and data portals at the federal level. It discusses:
1) The Open Data Task Force consisting of FPS BOSA DG DT and DAV/ASA that manages Data.gov.be and seeks to revamp it in 2021/22.
2) Other Belgian data portals including SODHA for social science data, a national transport data portal, and Statbel's data lab for beta datasets.
3) Available open data resources like the BeST address database and upcoming open datasets on election results, judicial maps, and cadastral statistics.
4) Initiatives around open government, reusable APIs, and encouraging sharing of open data
Open Source and Open Data
This document summarizes a presentation about open source and open data. It discusses key topics like open source licenses and business models, how to evaluate healthy open source projects, and examples of open data types and licensing. Open communities and initiatives are also covered, such as OpenSummerOfCode which funds students to build open source projects using open data.
Open Community Projects
This document discusses several open community projects including Wikipedia, Wikimedia Commons, Wikidata, OpenStreetMap, Wheelmap, Telraam, Weather Observations Website, GitHub curated lists, Common Voice, and others. It provides brief descriptions of each project, what opportunities they present for public administrations and organizations, and encourages contributions to help document government data and services.
From webform to API using microframeworks
This document discusses converting a webform into an API using microframeworks like Quarkus and libraries such as Jsoup and WireMock. It notes that while microframeworks allow rapid prototyping with few lines of code and fast development, the resulting API can be brittle and break if the underlying form or responses change. The document provides links to the Quarkus, Jsoup, Jib, and WireMock open source projects discussed.
Open data, what's cooking at the federal level 2020
Open data initiatives / data.gov.be at the Belgian Federal level, presented at the OpenBelgium 2020 conference
BOSA DG DT: opendata et intégrateur de services
Présentation de Service Public Fédéral Stratégie et Appui / DG Transformation digitale, l'intégrateur de services et la stratégie open data
Local and Regional digital transformation in Belgium
Local and regional digital transformation in Belgium, like IoT and Smart Cities projects, open source components, apps and services ...
Voordeel halen uit zoekmachines en semantic web
Hoe kan gestructureerde, semantische opmaak en machineleesbare content ervoor zorgen dat zoekmachines websites beter gaan "begrijpen".
Presentatie tijdens het "Make your website great again" event.
More from Bart Hanssens (20)
Open data, what's cooking at the federal level 2020
Open data, what's cooking at the federal level 2020
Local and Regional digital transformation in Belgium
Local and Regional digital transformation in Belgium
Insu Eid 20111018
- 1. EID in Belgium INSU - Stockholm – 24/Oct/2011 Bart Hanssens
- 2. Introduction
- 3. Electronic ID Card (front)
- 4. Electronic ID Card (back)
- 8. No PIN-code caching for signing
- 10. Loyalty card
- 11. Library card
- 14. Components
- 18. eID card and token
- 20. New architecture: IDP example Browser JBOSS EID Card IDP Trust Service Applet Website jtrust OCSP Belgium Module
- 25. JBoss 6 package
- 26. Communicates with Relying Parties (sites)
- 31. Validation of X509 certificates
- 32. Alternative to Java Certification Path Validator API
- 36. XAdES-X-L
- 38. ODF / OOXML
- 40. Optionally: embed eID photo
- 41. “green mark” in OpenOffice / MS-Office
- 42. Demo: Drupal and eID
- 43. Step 1: push beID button
- 44. Step 2: insert eID card
- 45. Step 3: enter PIN code
- 46. Step 4: enter email address
- 47. More info
- 54. Questions ?
- 55. Thanks ! Fedict – Federal Public Service ICT Maria-Theresiastraat 1/3 1000 Brussels (Belgium) www.fedict.be bart.hanssens[at]fedict.be | @BartHanssens