{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:30:42Z","timestamp":1760243442489,"version":"build-2065373602"},"reference-count":15,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2013,3,6]],"date-time":"2013-03-06T00:00:00Z","timestamp":1362528000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JSAN"],"abstract":"<jats:p>The intention of an authentication and authorization infrastructure (AAI) is to simplify and unify access to different web resources. With a single login, a user can access web applications at multiple organizations. The Shibboleth authentication and authorization infrastructure is a standards-based, open source software package for web single sign-on (SSO) across or within organizational boundaries. It allows service providers to make fine-grained authorization decisions for individual access of protected online resources. The Shibboleth system is a widely used AAI, but only supports protection of browser-based web resources. We have implemented a Shibboleth AAI extension to protect web services using Simple Object Access Protocol (SOAP). Besides user authentication for browser-based web resources, this extension also provides user and machine authentication for web service-based resources. Although implemented for a Shibboleth AAI, the architecture can be easily adapted to other AAIs.<\/jats:p>","DOI":"10.3390\/jsan2010109","type":"journal-article","created":{"date-parts":[[2013,3,6]],"date-time":"2013-03-06T11:11:47Z","timestamp":1362568307000},"page":"109-121","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["User and Machine Authentication and Authorization Infrastructure for Distributed Wireless Sensor Network Testbeds"],"prefix":"10.3390","volume":"2","author":[{"given":"Markus","family":"Anwander","sequence":"first","affiliation":[{"name":"Institute of Computer Science and Applied Mathematics, Universit\u00e4t Bern, Neubr\u00fcckstrasse 10, 3012 Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Torsten","family":"Braun","sequence":"additional","affiliation":[{"name":"Institute of Computer Science and Applied Mathematics, Universit\u00e4t Bern, Neubr\u00fcckstrasse 10, 3012 Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Philipp","family":"Hurni","sequence":"additional","affiliation":[{"name":"Institute of Computer Science and Applied Mathematics, Universit\u00e4t Bern, Neubr\u00fcckstrasse 10, 3012 Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Staub","sequence":"additional","affiliation":[{"name":"Institute of Computer Science and Applied Mathematics, Universit\u00e4t Bern, Neubr\u00fcckstrasse 10, 3012 Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gerald","family":"Wagenknecht","sequence":"additional","affiliation":[{"name":"Institute of Computer Science and Applied Mathematics, Universit\u00e4t Bern, Neubr\u00fcckstrasse 10, 3012 Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2013,3,6]]},"reference":[{"key":"ref_1","unstructured":"Shibboleth: What\u2019s Shibboleth?. Available online: http:\/\/shibboleth.net."},{"key":"ref_2","unstructured":"SWITCH, The Swiss Education and Research Network Zurich, Switzerland: Authentication and Authorization Infrastructure in a nutshell. Available online: http:\/\/www.switch.ch\/aai\/docs\/AAI-Flyer_en.pdf."},{"key":"ref_3","unstructured":"GridShib for Shibboleth2. Available online: http:\/\/gridshib.globus.org."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Jie, W., Arshad, J., Sinnott, R., Townend, P., and Lei, Z. (2011). A review of grid authentication and authorization technologies and support for federated access control. ACM Comput. Surv., 43, (No. 2), Article 12.","DOI":"10.1145\/1883612.1883619"},{"key":"ref_5","unstructured":"D-Grid Initiative: IVOM. Available online: http:\/\/www.d-grid.de\/."},{"key":"ref_6","unstructured":"ESP-Grid. Available online: http:\/\/wiki.oucs.ox.ac.uk\/esp-grid\/."},{"key":"ref_7","unstructured":"Condor Shibboleth Merger Project. Available online: http:\/\/www.cs.wisc.edu\/condor\/."},{"key":"ref_8","unstructured":"OIOSAML. Available online: http:\/\/digitaliser.dk\/group\/42063\/resources."},{"key":"ref_9","unstructured":"Predic8. Available online: http:\/\/www.predic8.com\/shibboleth-web-services-sso-en.htm."},{"key":"ref_10","unstructured":"Hardt, D. The OAuth 2.0 Authorization Framework. Available online: http:\/\/tools.ietf.org\/html\/rfc6749."},{"key":"ref_11","unstructured":"(OASIS Standard Specification, 2006). OASIS: Web Services Security: SOAP Message Security 1.1, OASIS Standard Specification."},{"key":"ref_12","unstructured":"Hurni, P., Staub, T., Wagenknecht, G., Anwander, M., and Braun, T. (2009, January 6\u20137). A Secure Remote Authentication, Operation and Management Infrastructure for Distributed Wireless Sensor Network Testbeds. Proceedings of the First Workshop on Global Sensor Networks (GSN \u201909), Kassel, Germany."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1109\/MPRV.2010.62","article-title":"iPhone: Smarter than the Average Phone","volume":"9","author":"Want","year":"2010","journal-title":"IEEE Pervasive Comput."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1145\/2063176.2063198","article-title":"Flexible Experimentation in Wireless Sensor Networks","volume":"55","author":"Coulson","year":"2012","journal-title":"Commun. ACM"},{"key":"ref_15","unstructured":"Hurni, P., Wagenknecht, G., Anwander, M., and Braun, T. (2010, January 17\u201319). A Testbed Management Architecture for Wireless Sensor Network Testbeds (TARWIS). Proceedings of the EWSN10, Coimbra, Portugal."}],"container-title":["Journal of Sensor and Actuator Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2224-2708\/2\/1\/109\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:45:22Z","timestamp":1760219122000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2224-2708\/2\/1\/109"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,3,6]]},"references-count":15,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2013,3]]}},"alternative-id":["jsan2010109"],"URL":"https:\/\/doi.org\/10.3390\/jsan2010109","relation":{},"ISSN":["2224-2708"],"issn-type":[{"type":"electronic","value":"2224-2708"}],"subject":[],"published":{"date-parts":[[2013,3,6]]}}}