A Secure Proxy-Based Cross-Domain Communication for Web Mashups
Date Issued
2010
Date
2010
Author(s)
Ao, Fu-Chi
Abstract
Web mashups, or mashups, are Web applications which integrate contents from heterogeneous sources. The goal of these applications is to provide users with a more integrated and single-stop browsing experience by information sharing and analysis. A provider, as a site, provides content or service to a mashup. Once a mashup has loaded by a browser, what comes from a provider creates an instance at the client-side. We call this instance “mashelet”. The Web page content retrieved from the mashup hosting site (excluding the mashlets) is called “original content”. In this thesis, for convenience, we refer either a mashlet or original content to “entity”.
With the rise of AJAX, the client-side mashup architecture becomes more and more popular. For client-side mashups to be interactive, it requires information exchange within the browser. The legacy same-origin policy (SOP) enforced by browsers governs access control in today’s browsers. Under SOP, however, there is either all trust or no trust across entities. Therefore, the current SOP is not a flexible information sharing policy for client-side mashups. This insufficiency neglects the needs of mashup developers to finely specify the access-control policy for each of their entities. Such a policy, down the “element-level” rather than the “entity-level”, serves to ensure the properties of an element can only be read by entities from trusted domains.
In this work, we propose a secure proxy-based cross-domain communication for Web mashups. Our trust model guarantees confidentiality, integrity, and authenticity for client-side mashups in the process of cross-domain information exchange. Furthermore, it provides flexible access control so that entities from different sources may have different access rights to a certain element of an entity.
Subjects
Website
mashup
browser
same-origin policy
security
proxy
access control
communication
Type
thesis
File(s)![Thumbnail Image]()
Loading...
Name
ntu-99-R97725034-1.pdf
Size
23.32 KB
Format
Adobe PDF
Checksum
(MD5):cae75a1a3b6cfdc5bc34b50a6a449244