http://dl.gi.de/handle/20.500.12116/21003 2026-07-21T13:32:08Z http://dl.gi.de/handle/20.500.12116/17207 Approaches and challenges for a single sign-on enabled extranet using Jasig CAS. Holzschuher, Florian; Peinl, René Hühnlein, Detlef; Roßnagel, Heiko In this paper we describe our experiences with setting up a single signon enabled intranet with open source software and then making it accessible over the internet using a reverse proxy. During this process, we encounter several issues. We describe those, discuss possible solutions and present our final setup. 2013-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/17205 An Open eCard Plug-in for accessing the German national Personal Health Record Kuhlisch, Raik; Petrautzki, Dirk; Schmölz, Johannes; Kraufmann, Ben; Thiemer, Florian; Wich, Tobias; Hühnlein, Detlef; Wieland, Thomas Hühnlein, Detlef; Roßnagel, Heiko An important future application of the German electronic health card (elektronische Gesundheitskarte, eGK) is the national Personal Health Record (PHR), because it enables a citizen to store and retrieve sensitive medical data in a secure and self-determined manner. As the stored data is encrypted with an eGK- specific certificate and retrieving the encrypted data is only possible after TLS- based authentication, the citizen needs to use a so called “PHR Citizen Client”, which allows to use the eGK for strong authentication, authorization, and decryption purposes. Instead of building such an application from scratch, this paper proposes to use the Open eCard App and its extension mechanism for the efficient creating of a PHR Citizen Client by developing an Open eCard Plug-in for accessing the German national Personal Health Record. 2013-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/17206 Selective LDAP Multi-Master Replication Bauereiss, Thomas; Gohmann, Stefan; Hutter, Dieter; Kläser, Alexander Hühnlein, Detlef; Roßnagel, Heiko LDAP directory services are widely used to store and manage information about the assets of organisations and to ease the administration of IT infrastructure. With the popularity of cloud computing many companies start to distribute their computational needs in mixed-cloud infrastructures. However, distributing an LDAP directory including sensitive information to partially trusted cloud servers would constitute a major security risk. In this paper, we describe an LDAP replication mechanism that allows for a fine-grained selection of parts of an LDAP directory tree that are replicated to another server using content-based filters, while maintaining the availability and performance advantages of a full multi-master replication. We discuss sufficient conditions on replication topology and admissible operations such that the replication mechanism provides eventual consistency of selectively replicated data. 2013-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/17204 Service providers' requirements for eID solutions: Empirical evidence from the leisure sector Kubach, Michael; Roßnagel, Heiko; Sellung, Rachelle Hühnlein, Detlef; Roßnagel, Heiko Although eID technology has undergone several development cycles and eID have been issued to citizens of various European countries, it is still not as broadly used as originally expected. One reason is the absence of compelling use cases besides eGovernment. Current Research focuses mainly on the needs of the user and technical aspects. The economic perspective is often disregarded. This is especially the case for the service providers that play a fundamental role in the adoption of the technology. The requirements of these stakeholders certainly have to be considered in the development of viable business models. So far, however, little empirical evidence on these requirements exists. We therefore performed a survey-based empirical analysis in two industries from the leisure sector to gain first insights into this topic. Results show that the service providers in our sample don't see a pressing need to change their currently used authentication method. However, they think that certain eID features could be valuable for their services. Our analysis of the hurdles showed that there is no ultimate reason that keeps service providers from implementing the eID technology. 2013-01-01T00:00:00Z