Web 2.0 users need usable mechanisms for sharing
their content with each other in a controlled manner across
boundaries of content-hosting or application-service providers
(CSPs). In this paper, we present a solution that builds upon
existing secret-link mechanism, and augment OpenID identity
providers with OpenIDemail and Role-based Trust-management
Policy Service (RTPS). OpenIDemail extends existing OpenID
protocol to enable OpenID identity providers to use email as
an alternative identifier and RTPS provides services for internet
users to organize their online credentials and polices, and for
CSPs to make access decisions. The proposed solution does not
require user to setup another account on each CSP to view
shared content and does not require any special software being
installed. The mechanism for content hosting and sharing are
separated, CSPs do not need to change their existing accesscontrol
mechanisms.
↧
