Currently, there are no suitable protocols, standards, or commercial products to authenticate and authorize users of Web-based group applications in an open, multi-domain networking environment, such as for large-scale collaborations on DOE scientific projects. Most existing standards and solutions address the problem in closed, proprietary environments; they cannot be applied for security in multi-domain environments, nor do they support secure collaborations. This project will create a security middleware platform to support a variety of security services for Web based group applications in an open environment. The platform will comprise a number of coherent and functional secure objects to perform registration, certification, authentication, and authorization security services for multiple Web applications. In addition, three secure collaborative Web applications will be designed: instant messaging, whiteboard, and secure document sharing. Phase I will design a number of generic secure objects, organized in the form of a security middleware platform, with each performing one particular security service. In addition, the project will develop protocols for the various security services, design the three secure group applications mentioned above, and create guidelines for the development of secure Web applications using the secure middleware platform.
Commercial Applications and Other Benefits as described by the awardee: A security middleware platform for Web applications should have great benefits for developers of secure Web applications, for their administrators, and for users. For developers, the platform will provide a comprehensive set of security objects for rapid applications development. For network administrators the platform will provide an easy-to-install-and-maintain single security system for multiple Web applications. For users, the platform will provide an easy-to-use, transparent system with strong security services
