13-02-2013, 11:58 AM
OAuth Web Authorization Protocol
[attachment=50664]
ABSTRACT
Allowing one Web service to act on our behalf with another has become increasingly important as social Internet services such as blogs, photo sharing, and social networks have become widely popular. OAuth, a new protocol for establishing identity management standards across services, provides an alternative to sharing our usernames and passwords, and exposing ourselves to attacks on our online data and identities.
EXISTING SYSTEM:
Over authentication credentials creates a major problem: it gives the service unrestricted access to the account we’ve given the credentials for. That service can now not only perform the action we’ve asked for but can also do anything with our information. A service given access to Alice’s Gmail account could not only read her contacts — it could also change or delete them, add new ones, read her email, send email on her behalf, and so on. Worse, because we often reuse passwords from one service to another, it could guess that Alice might use the same username and password on other sites — perhaps banking and credit-card sites.
Problems on existing system:
1. Any process operates only resisted candidates.
2. No Multiple Requests Available.
3. No secure operating in any process.
PROPOSED SYSTEM:
We often need one service to interact with another on our behalf. Consider two scenarios:
1. Alice has a Gmail account with hundreds of contacts in her contact list. She joins Face book and would like to see which of her Gmail contacts she can befriend in the social network. She can search Face book for each one individually, but allowing Face book to read her Gmail contacts directly would be much easier.
2. Bob has created a private photo album on Picasa with photos from a family function, and he would like to use a photo-printing service to print all the photos and mail the hardcopies to his grandparents. Bob could print each separately, of course; better, though, would be to direct the print service to his Picasa album and have the photos printed directly.
[attachment=50664]
ABSTRACT
Allowing one Web service to act on our behalf with another has become increasingly important as social Internet services such as blogs, photo sharing, and social networks have become widely popular. OAuth, a new protocol for establishing identity management standards across services, provides an alternative to sharing our usernames and passwords, and exposing ourselves to attacks on our online data and identities.
EXISTING SYSTEM:
Over authentication credentials creates a major problem: it gives the service unrestricted access to the account we’ve given the credentials for. That service can now not only perform the action we’ve asked for but can also do anything with our information. A service given access to Alice’s Gmail account could not only read her contacts — it could also change or delete them, add new ones, read her email, send email on her behalf, and so on. Worse, because we often reuse passwords from one service to another, it could guess that Alice might use the same username and password on other sites — perhaps banking and credit-card sites.
Problems on existing system:
1. Any process operates only resisted candidates.
2. No Multiple Requests Available.
3. No secure operating in any process.
PROPOSED SYSTEM:
We often need one service to interact with another on our behalf. Consider two scenarios:
1. Alice has a Gmail account with hundreds of contacts in her contact list. She joins Face book and would like to see which of her Gmail contacts she can befriend in the social network. She can search Face book for each one individually, but allowing Face book to read her Gmail contacts directly would be much easier.
2. Bob has created a private photo album on Picasa with photos from a family function, and he would like to use a photo-printing service to print all the photos and mail the hardcopies to his grandparents. Bob could print each separately, of course; better, though, would be to direct the print service to his Picasa album and have the photos printed directly.