{"id":"https://openalex.org/W3097153045","doi":"https://doi.org/10.21681/2311-3456-2020-04-32-43","title":"Authentication and Authorization in Microservice-Based Systems: Survey of Architecture Patterns","display_name":"Authentication and Authorization in Microservice-Based Systems: Survey of Architecture Patterns","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3097153045","doi":"https://doi.org/10.21681/2311-3456-2020-04-32-43","mag":"3097153045"},"language":"en","primary_location":{"id":"doi:10.21681/2311-3456-2020-04-32-43","doi":"https://doi.org/10.21681/2311-3456-2020-04-32-43","is_oa":true,"landing_page_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","pdf_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","source":{"id":"https://openalex.org/S4210234326","display_name":"Voprosy kiberbezopasnosti","issn_l":"2311-3456","issn":["2311-3456"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Voprosy kiberbezopasnosti","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007175264","display_name":"Alexander Barabanov","orcid":"https://orcid.org/0000-0003-4061-6611","observed_orcids":["https://orcid.org/0000-0003-4061-6611"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Alexander Barabanov","raw_affiliation_strings":["Advanced Software Technology Laboratory, Huawei, Moscow, Russia","Denis Makrushin, OSCP, Advanced Software Technology Laboratory, Huawei, Moscow, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Advanced Software Technology Laboratory, Huawei, Moscow, Russia","institution_ids":[]},{"raw_affiliation_string":"Denis Makrushin, OSCP, Advanced Software Technology Laboratory, Huawei, Moscow, Russia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044759150","display_name":"Denis Makrushin","orcid":"https://orcid.org/0009-0004-6480-5374","observed_orcids":["https://orcid.org/0009-0004-6480-5374"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Denis Makrushin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5007175264"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0518,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.76428173,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":null,"issue":"4(38)","first_page":"32","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6352999806404114,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.6352999806404114,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.19699999690055847,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.05270000174641609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/authentication","display_name":"authentication","score":0.8349999785423279},{"id":"https://openalex.org/keywords/authorization","display_name":"authorization","score":1.0},{"id":"https://openalex.org/keywords/microservices","display_name":"microservices","score":0.9070000052452087},{"id":"https://openalex.org/keywords/architectural-patterns","display_name":"architectural patterns","score":0.9710000157356262},{"id":"https://openalex.org/keywords/service-oriented-architecture","display_name":"service-oriented architecture","score":0.875},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.8849999904632568},{"id":"https://openalex.org/keywords/advanced-persistent-threats","display_name":"advanced persistent threats","score":0.7839999794960022},{"id":"https://openalex.org/keywords/security-architecture-design","display_name":"security architecture design","score":0.6629999876022339},{"id":"https://openalex.org/keywords/attack-surface","display_name":"attack surface","score":0.5019999742507935}],"concepts":[{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.7777822017669678},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7039264440536499},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.6540859937667847},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5972754955291748},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5898526906967163},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.5154567360877991},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.46670958399772644},{"id":"https://openalex.org/C101433766","wikidata":"https://www.wikidata.org/wiki/Q3543263","display_name":"Maturity (psychological)","level":2,"score":0.46431490778923035},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.46132487058639526},{"id":"https://openalex.org/C57041688","wikidata":"https://www.wikidata.org/wiki/Q220644","display_name":"Service-oriented architecture","level":3,"score":0.43372732400894165},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36268943548202515},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32859382033348083},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.11952409148216248},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09012821316719055},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.08927139639854431},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08426746726036072},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C138496976","wikidata":"https://www.wikidata.org/wiki/Q175002","display_name":"Developmental psychology","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.21681/2311-3456-2020-04-32-43","doi":"https://doi.org/10.21681/2311-3456-2020-04-32-43","is_oa":true,"landing_page_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","pdf_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","source":{"id":"https://openalex.org/S4210234326","display_name":"Voprosy kiberbezopasnosti","issn_l":"2311-3456","issn":["2311-3456"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Voprosy kiberbezopasnosti","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2009.02114","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2009.02114","pdf_url":"https://arxiv.org/pdf/2009.02114","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3083364328","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2009.02114.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2009.02114","doi":"https://doi.org/10.48550/arxiv.2009.02114","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2009.02114","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.21681/2311-3456-2020-04-32-43","doi":"https://doi.org/10.21681/2311-3456-2020-04-32-43","is_oa":true,"landing_page_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","pdf_url":"https://doi.org/10.21681/2311-3456-2020-04-32-43","source":{"id":"https://openalex.org/S4210234326","display_name":"Voprosy kiberbezopasnosti","issn_l":"2311-3456","issn":["2311-3456"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Voprosy kiberbezopasnosti","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Systematic Review","id":"https://openalex.org/study-designs/systematic-review"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3097153045.pdf","grobid_xml":"https://content.openalex.org/works/W3097153045.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W1987061089","https://openalex.org/W2054335648","https://openalex.org/W2298494124","https://openalex.org/W2423329165","https://openalex.org/W2605947451","https://openalex.org/W2622214451","https://openalex.org/W2749040653","https://openalex.org/W2791003924","https://openalex.org/W2804174676","https://openalex.org/W2810733389","https://openalex.org/W2849203795","https://openalex.org/W2906100231","https://openalex.org/W2906661982","https://openalex.org/W2907535280","https://openalex.org/W2922597871","https://openalex.org/W2937086237","https://openalex.org/W2968112401","https://openalex.org/W2969352395","https://openalex.org/W2969940496","https://openalex.org/W2995346061","https://openalex.org/W2999957536","https://openalex.org/W3003732770","https://openalex.org/W3011512329","https://openalex.org/W3018067527","https://openalex.org/W3082948325"],"related_works":["https://openalex.org/W7066341934","https://openalex.org/W7071218722","https://openalex.org/W4405275415","https://openalex.org/W4220829356","https://openalex.org/W7164945193","https://openalex.org/W2766248701","https://openalex.org/W4387042893","https://openalex.org/W2617216022","https://openalex.org/W7162993245","https://openalex.org/W4416812583"],"abstract_inverted_index":{"Abstract":[0],"Objective.":[1],"Service-oriented":[2],"architecture":[3,35,63,156],"and":[4,24,33,59,68,86,93,101,111,124,127,142],"its":[5,128,140],"microservice-based":[6],"approach":[7],"increase":[8],"an":[9],"attack":[10],"surface":[11],"of":[12,39,46,82],"applications.":[13],"Exposed":[14],"microservices":[15],"become":[16],"a":[17,52,79],"pivot":[18],"point":[19],"for":[20,151],"advanced":[21],"persistent":[22],"threats":[23],"completely":[25],"change":[26],"the":[27,96],"threat":[28],"landscape.":[29],"Correctly":[30],"implemented":[31],"authentication":[32,67,123],"authorization":[34,69,125],"patterns":[36,64,126,137],"are":[37],"basis":[38],"any":[40],"software":[41],"maturity":[42],"program.":[43],"The":[44],"aim":[45],"this":[47,75,105],"study":[48],"is":[49],"to":[50,55,65],"provide":[51],"helpful":[53],"resource":[54],"application":[56,152],"security":[57,91,98,113,153],"architect":[58],"developers":[60],"on":[61,108,131],"existing":[62],"implement":[66],"in":[70,122],"microservices-based":[71],"systems.":[72],"Method.":[73],"In":[74,104],"paper,":[76],"we":[77,117,138],"conduct":[78],"systematic":[80],"review":[81],"major":[83,97,112],"electronic":[84],"databases":[85],"libraries":[87],"as":[88,90,148],"well":[89],"standards":[92],"presentations":[94,115],"at":[95],"conferences.":[99],"Results":[100],"practical":[102],"relevance.":[103],"work":[106],"based":[107],"research":[109],"papers":[110],"conferences":[114],"analysis,":[116],"identified":[118],"industry":[119],"best":[120],"practices":[121],"applicability":[129],"depending":[130],"environment":[132],"characteristic.":[133],"For":[134],"each":[135],"described":[136],"reviewed":[139],"advantages":[141],"disadvantages":[143],"that":[144],"could":[145],"be":[146],"used":[147],"decision-making":[149],"criteria":[150],"architects":[154],"during":[155],"design":[157],"phase.":[158]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2020-11-09T00:00:00"}