1. jmaria.fontanillo@rediris.es J. Access Control to Video Resources TF-VVC

2. The bad way

3. TF-VVC The bad way

4. TF-VVC

9. AuthZ module AuthN have a private key and AuthZ have the public key AuthZ check that the assertion is signed by AuthN The assertion contains attributes, that allow implement policies  Example User id, Group id, time to live of assertion, role, project, institution, etc

10. TF-VVC Implementation for DSS Will be aligned with JRA5 Improvements:  Independent authorization service The client ask to authoritation service and it return a tokenThe client ask to authoritation service and it return a token The client contact with streaming server with this token as parameterThe client contact with streaming server with this token as parameter The token (signed by authZ service) will open or not the access to video depending on small set of parameters: token timeout, resource, session code…The token (signed by authZ service) will open or not the access to video depending on small set of parameters: token timeout, resource, session code…

11. TF-VVC

12. Advantages:  Centralized authZ policies  More flexible portal to access to our video resources  We separate two domains: AuthN server- home organizationAuthN server- home organization AuthZ server+video streaming servers – resources ownerAuthZ server+video streaming servers – resources owner