Joe Pato

Massachusetts Institute of Technology (MIT), Electrical Engineering and Computer Science, Visiting Scientist

Followers

Following

Co-authors

Public Views

Manuel David Masseno

Instituto Politécnico de Beja

Anna Lipphardt

Albert-Ludwigs-Universität Freiburg

Armando Marques-Guedes

UNL - New University of Lisbon

Corey Brettschneider

Brown University

Jorge Eterovic

Universidad Nacional de la Matanza

Roshan Chitrakar

Nepal College of Information Technology

Maurizio Di Masi

University of Perugia

Dr. Shadab Alam

Jazan University

Bogdan Gabrys

University of Technology Sydney

PALIMOTE JUSTICE

RIVERS STATE POLYTECHNIC

Interests

Uploads

Papers by Joe Pato

Network computing system reference manual

Google, Inc. (search), Subscribe (Full Service), Register (Limited Service, Free), Login. Search:... more

The network computing architecture and system: an environment for developing distributed applications

Digest of Papers. COMPCON Spring 88 Thirty-Third IEEE Computer Society International Conference, 1988

Download

Model-based validation of enterprise access policies

security, access control, policy, validation Coordinating security seamlessly across an enterpris... more security, access control, policy, validation Coordinating security seamlessly across an enterprise is a challenge. Enterprises deploy multiple access control mechanisms at different technology layers; each mechanism is painstakingly configured and maintained using specialized user interfaces, most likely by different administrators in different organizations at different sites, perhaps employing different notions of users and roles. This piecemeal approach makes security management labor-intensive and, therefore, expensive, error-prone and slow to adapt. We present a model-driven technique for automated policy-based access analysis. Based on the ideas presented in this paper, we have built a prototype, the Integrated Security Management (ISM) system which, given the security configurations of hosts, applications and network devices, automatically validates whether the enterprise is in compliance with high-level enterprise access policy. The system relies on composable models that ca...

Download

Identity Management: a Key e-Business Enabler

Digital identities, profiles and their management are increasingly required to enable interaction... more

Download

1 Preserving Privacy Based on Semantic Policy Tools

Abstract—Private data of individuals is constantly being collected, analyzed, and stored by diffe... more Abstract—Private data of individuals is constantly being collected, analyzed, and stored by different kinds of organizations: shopping sites to provide better service and recommendations, hospitals for improved healthcare, and government agencies to enable national defense and law enforcement. Sharing data between these organizations makes it possible to discover important knowledge and draw useful conclusions but raises concerns about information privacy and trust. Until recently the focus was on restricting access to data on a “need to know ” basis, but since the 9/11 Commission there has been a paradigm shift to “need to share”. Our work explores the use of semantic privacy policies, justifications for data requests, and automated auditing to encourage sharing of sensitive data between organizations. We describe an architecture based on our policy tools that evaluates incoming queries against semantic policies and domain knowledge and provides a justification for each query- why ...

Download

If privacy is the problem, is DRM the answer?

Download

On Adaptive Identity Management: The Next Generation of Identity Management Technologies

Identity management plays a key role in enabling personal, business and government activities alo... more Identity management plays a key role in enabling personal, business and government activities along with interactions and transactions in the digital world. The “chapter 1” of identity management is about the current paradigm, i.e., multiple, slightly integrated products and solutions for relatively static, closed and well controlled environments. It involves little integration, at the management level, with the management of other aspects such as security, privacy and trust. Current trends suggest that the digital world is going to be more and more flexible, interconnected and open. The boundaries between enterprises, organizations, societies and governments will become increasingly blurry as people play different roles in multiple activities that span across heterogeneous contexts. Identity management needs to evolve. We believe that the “chapter 2” of identity management is about adaptive identity management i.e., open, flexible, policydriven, context-aware identity management th...

Download

Secure Hardware-based Distributed Authorization Underpinning a Web Sevice Framework

This paper presents a distributed authorisation model suitable for use in a web service framework... more This paper presents a distributed authorisation model suitable for use in a web service framework where multiple parties are involved in performing a particular transaction. The authorisation model uses a third party authorisation service that checks users or services' credentials against a set of authorisation policies. A traditional service provision model does not scale well for such transactions. The proposed model uses a hardware security appliance to deliver the service to the most appropriate site involved in the transaction. The authorisation model supports a multi-party session so that authorisation policies can be checked and built as part of the web service composition process.

Download

Secure Hardware-based Distributed Authorisation Underpinning a Web Service Framework

This paper presents a distributed authorisation model suitable for use in a web service framework... more This paper presents a distributed authorisation model suitable for use in a web service framework where multiple parties are involved in performing a particular transaction. The authorisation model uses a third party authorisation service that checks users or services’ credentials against a set of authorisation policies. A traditional service provision model does not scale well for such transactions. The proposed model uses a hardware security appliance to deliver the service to the most appropriate site involved in the transaction. The authorisation model supports a multi-party session so that authorisation policies can be checked and built as part of the web service composition process.

Download

Summary of a Workshop on the Technology, Policy, and Cultural Dimensions of Biometric Systems

Brown university workstation environment summary paper

DCE Authorization Services--Privilege Server

Secure Hardware-based Distributed Authorization Underpinning a Web Sevice Framework

Secure Hardware-based Distributed Authorisation Underpinning a Web Service Framework

Download

Security administration for electronic data processing

Marco Casassa Mont, Adrian Baldwin, Joe Pato

ABSTRACT This paper presents a distributed authorisation model suitable for use in a web service ... more ABSTRACT This paper presents a distributed authorisation model suitable for use in a web service framework where multiple parties are involved in performing a particular transaction. The authorisation model uses a third party authorisation service that checks users or services&#39; credentials against a set of authorisation policies. A traditional service provision model does not scale well for such transactions. The proposed model uses a hardware security appliance to deliver the service to the most appropriate site involved in the transaction. The authorisation model supports a multi-party session so that authorisation policies can be checked and built as part of the web service composition process.

A User Account Registration System for a Large (Heterogeneous) UNIX Network

Usenix, 1988

Biometric Recognition: Challenges and Opportunities

Page 1. CHALLENGES AND OPPORTUNITIES RESEARCH COUNCIL OF THE NATIONAL ACADEMIES Page 2. Joseph N.... more

The Brown Workstation Environment

The Field Programming Environment: A Friendly Integrated Environment for Learning and Development, 1995

All the interfaces in FIELD are based on a set of tools developed at Brown University for worksta... more All the interfaces in FIELD are based on a set of tools developed at Brown University for workstation programming. This toolkit, the Brown Workstation Environment or BWE for short, was originally designed to support PECAN and BALSA, extended and extensively rewritten to support GARDEN, and then extended to support FIELD. In the interim it has been used for a variety of other projects.

If privacy is the problem, is DRM the answer?

Network computing system reference manual

Google, Inc. (search), Subscribe (Full Service), Register (Limited Service, Free), Login. Search:... more

The network computing architecture and system: an environment for developing distributed applications

Digest of Papers. COMPCON Spring 88 Thirty-Third IEEE Computer Society International Conference, 1988

Download

Model-based validation of enterprise access policies

Download

Identity Management: a Key e-Business Enabler

Digital identities, profiles and their management are increasingly required to enable interaction... more

Download

1 Preserving Privacy Based on Semantic Policy Tools

Download

If privacy is the problem, is DRM the answer?

Download

On Adaptive Identity Management: The Next Generation of Identity Management Technologies

Download

Secure Hardware-based Distributed Authorization Underpinning a Web Sevice Framework

Download

Secure Hardware-based Distributed Authorisation Underpinning a Web Service Framework

This paper presents a distributed authorisation model suitable for use in a web service framework... more This paper presents a distributed authorisation model suitable for use in a web service framework where multiple parties are involved in performing a particular transaction. The authorisation model uses a third party authorisation service that checks users or services’ credentials against a set of authorisation policies. A traditional service provision model does not scale well for such transactions. The proposed model uses a hardware security appliance to deliver the service to the most appropriate site involved in the transaction. The authorisation model supports a multi-party session so that authorisation policies can be checked and built as part of the web service composition process.

Download

Summary of a Workshop on the Technology, Policy, and Cultural Dimensions of Biometric Systems

Brown university workstation environment summary paper

DCE Authorization Services--Privilege Server

Secure Hardware-based Distributed Authorization Underpinning a Web Sevice Framework

Secure Hardware-based Distributed Authorisation Underpinning a Web Service Framework

Download

Security administration for electronic data processing

Marco Casassa Mont, Adrian Baldwin, Joe Pato

A User Account Registration System for a Large (Heterogeneous) UNIX Network

Usenix, 1988

Biometric Recognition: Challenges and Opportunities

Page 1. CHALLENGES AND OPPORTUNITIES RESEARCH COUNCIL OF THE NATIONAL ACADEMIES Page 2. Joseph N.... more

The Brown Workstation Environment

The Field Programming Environment: A Friendly Integrated Environment for Learning and Development, 1995

If privacy is the problem, is DRM the answer?

Joe Pato

Related Authors

Uploads

Papers by Joe Pato

Log In