Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Access Specification and Validation Framework for Secure Smart ID Cards Deployment

Published

Author(s)

Ramaswamy Chandramouli, Stephen Quirolgico

Abstract

Deployment of smart cards as identity tokens (Smart ID Cards) requires the support of an enterprise system called Identity Management System (IDMS) for collection, storage, processing and distribution of personal identity credentials. Secure configuration of IDMS for this application domain (IDMS-SCD) requires an access specification and validation framework that can enable expression and enforcement of a comprehensive set of policies. These policies span the privacy, integrity and confidentiality requirements of the credential data and the processes associated with it. In this paper, we describe an implementation of an access specification and policy specification framework for IDMS-SCD using XML Schema and XML and a validation framework for checking the access specification for conformance to policies using XSLT. We outline the drivers and the roadmap for development of the access specification and validation framework and its benefits in terms of extensibility and ease of implementation.
Proceedings Title
Proceedings of 13th World Multi-Conference on Systemics, Cybernetics and Informatics (WMSCI 2009)
Conference Dates
July 10-13, 2009
Conference Location
Orlando, FL
Conference Title
13th World Multi-Conference on Systemics, Cybernetics and Informatics (WMSCI 2009)

Keywords

access control, identity management, smart cards, XML, XSLT

Citation

Chandramouli, R. and Quirolgico, S. (2009), Access Specification and Validation Framework for Secure Smart ID Cards Deployment, Proceedings of 13th World Multi-Conference on Systemics, Cybernetics and Informatics (WMSCI 2009), Orlando, FL, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=890026 (Accessed June 19, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created July 10, 2009, Updated February 19, 2017