Security

The Security infrastructure is designed to meet commercial-grade security requirements following standard practice in Web-based e-Commerce applications. The security infrastructure is based on industrial web service specifications for establishing trust, maintaining security policies, enable access rights and enforcing restrictions for other actors consistent with the terms of operational security policies for protection of IPR. GRIA provides a dynamic policy management component to define and enforce policies for accessing services, and for individual resources. The E2ESecurity infrastructure from NEC has been integrated with GRIA to provide message level security (WS-Security), secure exchange of multiple messages within a conversation (WS-SecureConversation) and key establishment and management (WS-Trust). IT Innovation and NEC are collaborating through concertation with NextGRID to develop Dynamic Access Control (DAC) components for industry.

SIMDAT modules for Security infrastructure

• GRIA by IT Innovation
• E2ESecurity by NEC
• DAC by NEC

---