{"id":"https://openalex.org/W3157356172","doi":"https://doi.org/10.1109/icccn52240.2021.9522214","title":"Capability-based access control for multi-tenant systems using OAuth 2.0 and Verifiable Credentials","display_name":"Capability-based access control for multi-tenant systems using OAuth 2.0 and Verifiable Credentials","publication_year":2021,"publication_date":"2021-07-01","ids":{"openalex":"https://openalex.org/W3157356172","doi":"https://doi.org/10.1109/icccn52240.2021.9522214","mag":"3157356172"},"language":"en","primary_location":{"id":"doi:10.1109/icccn52240.2021.9522214","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn52240.2021.9522214","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Conference on Computer Communications and Networks (ICCCN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2104.11515","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052879509","display_name":"Nikos Fotiou","orcid":"https://orcid.org/0000-0001-9100-1081"},"institutions":[{"id":"https://openalex.org/I73142707","display_name":"Athens University of Economics and Business","ror":"https://ror.org/03s262162","country_code":"GR","type":"education","lineage":["https://openalex.org/I73142707"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Nikos Fotiou","raw_affiliation_strings":["Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","<sup>*</sup> Athens University of Economics and Business"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","institution_ids":["https://openalex.org/I73142707"]},{"raw_affiliation_string":"<sup>*</sup> Athens University of Economics and Business","institution_ids":["https://openalex.org/I73142707"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064354689","display_name":"Vasilios A. Siris","orcid":"https://orcid.org/0000-0001-8521-3774"},"institutions":[{"id":"https://openalex.org/I73142707","display_name":"Athens University of Economics and Business","ror":"https://ror.org/03s262162","country_code":"GR","type":"education","lineage":["https://openalex.org/I73142707"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Vasilios A. Siris","raw_affiliation_strings":["Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","<sup>*</sup> Athens University of Economics and Business"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","institution_ids":["https://openalex.org/I73142707"]},{"raw_affiliation_string":"<sup>*</sup> Athens University of Economics and Business","institution_ids":["https://openalex.org/I73142707"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088432697","display_name":"George C. Polyzos","orcid":"https://orcid.org/0000-0003-0030-4808"},"institutions":[{"id":"https://openalex.org/I73142707","display_name":"Athens University of Economics and Business","ror":"https://ror.org/03s262162","country_code":"GR","type":"education","lineage":["https://openalex.org/I73142707"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"George C. Polyzos","raw_affiliation_strings":["Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","<sup>*</sup> Athens University of Economics and Business"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, School of Information Sciences and Technology, Mobile Multimedia Laboratory, Athens University of Economics and Business, Greece","institution_ids":["https://openalex.org/I73142707"]},{"raw_affiliation_string":"<sup>*</sup> Athens University of Economics and Business","institution_ids":["https://openalex.org/I73142707"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I73142707"],"apc_list":null,"apc_paid":null,"fwci":0.2557,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.43599007,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/json","display_name":"JSON","score":0.8508427143096924},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7803609371185303},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.7205426692962646},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.6111154556274414},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5425288677215576},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4951430857181549},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.453438401222229},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.44313865900039673},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4302457571029663},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3884413242340088},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3322063088417053},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21863612532615662}],"concepts":[{"id":"https://openalex.org/C2780416260","wikidata":"https://www.wikidata.org/wiki/Q2063","display_name":"JSON","level":2,"score":0.8508427143096924},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7803609371185303},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.7205426692962646},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.6111154556274414},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5425288677215576},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4951430857181549},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.453438401222229},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.44313865900039673},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4302457571029663},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3884413242340088},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3322063088417053},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21863612532615662},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/icccn52240.2021.9522214","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn52240.2021.9522214","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Conference on Computer Communications and Networks (ICCCN)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2104.11515","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.11515","pdf_url":"https://arxiv.org/pdf/2104.11515","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3157356172","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2104.11515.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2104.11515","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2104.11515","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2104.11515","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.11515","pdf_url":"https://arxiv.org/pdf/2104.11515","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.44999998807907104,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3157356172.pdf","grobid_xml":"https://content.openalex.org/works/W3157356172.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2037107113","https://openalex.org/W2061197573","https://openalex.org/W2112995928","https://openalex.org/W2159364396","https://openalex.org/W2254160488","https://openalex.org/W2257521072","https://openalex.org/W2296718334","https://openalex.org/W2299259492","https://openalex.org/W2341513648","https://openalex.org/W2893478812","https://openalex.org/W2899577511","https://openalex.org/W2932356826","https://openalex.org/W2945403765","https://openalex.org/W3008428742","https://openalex.org/W3012237669","https://openalex.org/W4238355153"],"related_works":["https://openalex.org/W3197966784","https://openalex.org/W2597645350","https://openalex.org/W2949059170","https://openalex.org/W1496993044","https://openalex.org/W21414675","https://openalex.org/W2345841694","https://openalex.org/W2396345844","https://openalex.org/W2029349492","https://openalex.org/W1948615306","https://openalex.org/W2074264690","https://openalex.org/W1711009986","https://openalex.org/W3015092513","https://openalex.org/W1526893816","https://openalex.org/W166361363","https://openalex.org/W2589853071","https://openalex.org/W3172191549","https://openalex.org/W2019627667","https://openalex.org/W2185490463","https://openalex.org/W80777739","https://openalex.org/W3019311718"],"abstract_inverted_index":{"We":[0,53],"propose":[1,70],"a":[2,21,28,71,133,152],"capability-based":[3],"access":[4,77],"control":[5],"technique":[6],"for":[7,24,34,41,98],"sharing":[8],"Web":[9,86,131],"resources,":[10],"based":[11,79],"on":[12,80,129],"Verifiable":[13],"Credentials":[14],"(VCs)":[15],"and":[16,43,49,92,136],"OAuth":[17,62,75,111,158],"2.0.":[18],"VCs":[19,31,45,59,91],"are":[20,32],"secure":[22],"means":[23],"expressing":[25],"claims":[26,126],"about":[27],"subject.":[29],"Although":[30],"ideal":[33],"encoding":[35],"capabilities,":[36],"the":[37,61,121,144,157],"lack":[38],"of":[39,74,95,120,123,146],"standards":[40],"exchanging":[42],"using":[44],"impedes":[46],"their":[47,51],"adoption":[48],"limits":[50],"interoperability.":[52],"mitigate":[54],"this":[55,67],"problem":[56],"by":[57,127,150],"integrating":[58],"into":[60],"2.0":[63,76,112,159],"authorization":[64],"flow.":[65],"To":[66],"end,":[68],"we":[69,142],"new":[72,153],"form":[73],"token":[78],"VCs.":[81],"Our":[82,102],"approach":[83],"leverages":[84,156],"JSON":[85,130],"Tokens":[87],"(JWT)":[88],"to":[89,109],"encode":[90],"takes":[93],"advantage":[94],"JWT-based":[96],"mechanisms":[97],"proving":[99],"VC":[100,125,147],"possession.":[101],"solution":[103],"not":[104],"only":[105],"requires":[106],"minimum":[107],"changes":[108],"existing":[110],"code":[113],"bases,":[114],"but":[115],"it":[116],"also":[117],"removes":[118],"some":[119],"complexity":[122],"verifying":[124],"relying":[128],"Signatures:":[132],"simple,":[134],"standardized,":[135],"well":[137],"supported":[138],"signature":[139],"format.":[140],"Additionally,":[141],"fill":[143],"gap":[145],"generation":[148],"processes":[149],"defining":[151],"protocol":[154],"that":[155],"\u201cclient":[160],"credentials\u201d":[161],"grant.":[162]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}