Secure Javascript Object Notation (SecJSON) Enabling granular confidentiality and integrity of JSON documents

Currently, web and mobile-based systems exchange information with other services, mostly through APIs that extend the functionality and enable multipart interoperable information exchange. Most of this is accomplished through the usage of RESTful APIs and data exchange that is conducted using JSON o...

Celý popis

Uloženo v:
Podrobná bibliografie
Vydáno v:ICITST : 2016 11th International Conference for Internet Technology and Secured Transactions s. 329 - 334
Hlavní autoři: Santos, Tiago, Serrao, Carlos
Médium: Konferenční příspěvek
Jazyk:angličtina
Vydáno: Infonomics Society 01.12.2016
IEEE
Témata:
API
Confidentiality
Cryptography
Encoding
HTTPS
Instant messaging
Integrity
JSON
Protocols
Security
SSL/TLS
World Wide Web
XML
ISBN:1908320737, 9781908320735
On-line přístup:Získat plný text
Tagy: Přidat tag
Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!
Popis
Shrnutí:Currently, web and mobile-based systems exchange information with other services, mostly through APIs that extend the functionality and enable multipart interoperable information exchange. Most of this is accomplished through the usage of RESTful APIs and data exchange that is conducted using JSON over the HTTP or HTTPS protocol. In the case of the exchange requires some specific security requirements, SSL/TLS protocol is used to create a secure authenticated channel between the two communication end-points. This is a scenario where all the content of the channels is encrypted and is useful if the sender and the receptor are the only communicating parties, however this may not be the case. The authors of this paper, present a granular mechanism for selectively offering confidentiality and integrity to JSON documents, through the usage of public-key cryptography, based on the mechanisms that have been used also to provide XML security. The paper presents the proposal of the syntax for the SecJSON mechanism and an implementation that was created to offer developers the possibility to offer this security mechanism into their own services and applications.
ISBN:1908320737
9781908320735
DOI:10.1109/ICITST.2016.7856724