Silvio Ranise

Exploring Architectures for Cryptographic Access Control Enforcement in the Cloud for Fun and Optimization

2020

To facilitate the adoption of cloud by organizations, Cryptographic Access Control (CAC) is the obvious solution to control data sharing among users while preventing partially trusted Cloud Service Providers (CSP) from accessing sensitive data. Indeed, …

Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities

2023

An Attribute Authority is an entity responsible for establishing, maintaining, and sharing a subject’s qualified attributes, such as titles and qualifications. In the OpenID Connect digital identity ecosystem, In the OpenID Connect digital identity ecosystem, …