This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these template messages) The topic of this article may not meet Wikipedia's notability guidelines for products and services. Please help to demonstrate the notability of the topic by citing reliable secondary sources that are independent of the topic and provide significant coverage of it beyond a mere trivial mention. If notability cannot be shown, the article is likely to be merged, redirected, or deleted.Find sources: "ZXID" – news · newspapers · books · scholar · JSTOR (November 2011) (Learn how and when to remove this message) This article may contain excessive or inappropriate references to self-published sources. Please help improve it by removing references to unreliable sources where they are used inappropriately. (November 2011) (Learn how and when to remove this message) This article may require cleanup to meet Wikipedia's quality standards. No cleanup reason has been specified. Please help improve this article if you can. (January 2012) (Learn how and when to remove this message) (Learn how and when to remove this message)
ZXID
Initial releaseAugust 1, 2005 (2005-08-01)
Stable release
Release 1.03 / August 12, 2011 (2011-08-12)
Written inC/C++, Java, CSharp, PHP, Perl, others per SWIG
Operating systemCross-platform
Available inEnglish
TypeIdentity and access management
LicenseApache License, Version 2.0
Websitehttp://zxid.org/

ZXID.org[1] Identity Management toolkit implements standalone SAML 2.0, Liberty ID-WSF 2.0, and XACML 2.0 stacks and aims at implementing all popular federation, SSO, and ID Web Services protocols. It is a C implementation with minimal external dependencies - OpenSSL, CURL, and zlib – ensuring easy deployment (no DLL hell). Due to its small footprint and efficient and accurate schema driven implementation, it is suitable for embedded and high volume applications. Language bindings to all popular highlevel languages such as PHP, Perl, and Java, are provided via SWIG. ZXID implements, as of Nov 2011, SP, IdP, WSC, WSP, Discovery, PEP, and PDP roles. ZXID is the reference implementation of the core security architecture of the TAS3.eu project.

Research and projects

TAS3 architecture, and ZXID as a reference implementation, has been used by various research efforts.[2][3][4][5][6][7][8][9][10][11][12] [13]

ZXID.org has been deployed commercially by various enterprise customers in US (e.g. Symlabs Inc., LightSquared, etc.), Europe (Synergetics NV, Levelview Lda, zxidp.org, etc.), and Asia (e.g. Sri Lanka Hotels & Resorts).

IPR status

Apache2 Open Source License. All dependency libraries (OpenSSL, libcurl, zlib) are under similarly liberal open source license.

The underlying standards are all Royalty Free as specified in Liberty Alliance and OASIS IPR policies. The TAS3 architecture, of which ZXID is the reference implementation, is covered by TAS3 Consortium "Royalty free to implement and use" pledge at www.tas3.eu section "Install and configure" (http://vds1628.sivit.org/tas3/?page_id=150#section3)

In TAS3 General Assembly of 2010-09-13, following declaration was made:
"TAS3 architecture and specifications, as described in public deliverables D2.1, D2.4, and D7.1, are licensed free for implementation and use by anyone. Up to June 2010, TAS3 consortium partners do not hold patents nor will exercise patents that cover implementation and use of the TAS3 architecture and specifications of those deliverables. This license is only granted for the specific purpose of correct implementations of TAS3 specifications."[14][15]

History

ZXID was started in 2005 by Sampo Kellomäki while still working with Symlabs. In 2006 Sampo obtained a commitment from Symlabs to release the code under the Apache2 license, which effectively made ZXID an open source project. In 2009 the TAS3 project adopted ZXID as the reference implementation of TAS3 core security technologies. The 1.0 release and end of initial development phase happened in May 2011. ZXID is considered to be stable with respect to SAML2, ID-WSF2, and XACML2 features. ZXID continues to be an active open source project (as of October 2014) and new features, some of which may not be stable, continue to be added.

References

  1. ^ Sampo Kellomäki: "ZXID", http://zxid.org/
  2. ^ A. Bertolino, et al.: "Enhancing Service Federation Trustworthiness through Online Testing", IEEE Computer, January 2012 (vol. 45 no. 1) pp. 66–72, 2012. Enhancing Service Federation Trustworthiness through Online Testing
  3. ^ I. Ciuciu, et al.: "Ontology Based Interoperation for Securely Shared Services”, in Proceedings of the 4th International Conference on New Technologies, Mobility and Security, Paris, France, February 2011
  4. ^ C. Hütter, R. Lorch and K. . Böhm: "Evolving Cooperation through Reciprocity Using a Centrality-based Reputation System", in Proceedings of the IEEE/WIC/ACM International Conference on Intelligent Agent Technology (IAT), 2011.
  5. ^ D. W. Chadwick, S. F. Lievens, J. I. den Hartog, A. Pashalidis and J. Alhadeff: "My Private Cloud Overview – A Trust, Privacy and Security Infrastructure for the Cloud", in Proc IEEE 4th Int Conf on Cloud Computing (IEEE Cloud 2011), Washiongton DC, USA, Jul. 2011, pp. 752–753.
  6. ^ A. Pashalidis, B. Preneel: "Evaluating Tag-Based Preference Obfuscation Systems", IEEE Transactions on Knowledge Engineering, Jun. 2011.
  7. ^ J. Müller, et al.: "Secure Business Processes in Service-Oriented Architectures – A Requirements Analysis", in Proceedings of the 8th IEEE European Conference on Web Services, Cyprus, 2010, pp. 35–42.
  8. ^ S. Winfield, T. Kirkham: "Let’s Keep It Personal: ePortfolio Data in Next Generation Distributed Computing Applications", in Learning Forum London 2010 Proceedings, 2010, pp. 219–220.
  9. ^ Q. Reul, G. Zhao: "Enabling Access to Web Resources through SecPODE-Based Annotations", in Proceedings of the 6th International Workshop on Semantic Web and Web Semantics, Crete, Greece, 2010, pp. 596–605.
  10. ^ D. W. Chadwick, G. Inman and P. Coxwell: "CardSpace in the cloud", in Proceedings of the 17th ACM conference on Computer and communications security, New York, NY, 2010, pp. 657–659.
  11. ^ T. Kirkham, S. Winfield and M. Santos: "Developing user centered management of personal data in a distributed student placement application", in 5th Int. Summer School organised jointly by the PrimeLife EU project, in cooperation with the IFIP WG 9.2, 9.6/11.7 11.4, 11.6., Privacy and Identity Management for Life, Nice, France, 2009.
  12. ^ A. Bertolino, G. De Angelis and A. Polini: "On-line validation of service oriented systems in the European Project TAS³", in International Workshop on Principles of Engineering Service Oriented Systems, Vancouver, Canada, 2009, pp. 107–110.
  13. ^ P. Ferdinand, et al.: "Accomplishing Privacy and Security requirements in ROLE with TAS³ findings", in Stellar Alpine Rendez-vous, Garmisch-Partenkirchen, Germany, 2009.
  14. ^ TAS3 Consortium General Assembly minutes from 2010-09-13, as excerpted on tas3.eu section "Software" (old ref good as of late 2011)
  15. ^ TAS3 Consortium General Assembly minutes from 2010-09-13, as excerpted on tas3.eu section "Install and Configure" (new ref, worked on 20120416)
Category