prikaz prve stranice dokumenta Sigurnosni protokoli za jedinstvenu prijavu
No public access
undergraduate thesis
Sigurnosni protokoli za jedinstvenu prijavu
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. urn:nbn:hr:168:048333
Galovac, Željka
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Galovac, Ž. (2018). Sigurnosni protokoli za jedinstvenu prijavu (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:048333

Galovac, Željka. "Sigurnosni protokoli za jedinstvenu prijavu." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:048333

Galovac, Željka. "Sigurnosni protokoli za jedinstvenu prijavu." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:048333

Galovac, Ž. (2018). 'Sigurnosni protokoli za jedinstvenu prijavu', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 27 November 2024, https://urn.nsk.hr/urn:nbn:hr:168:048333

Galovac Ž. Sigurnosni protokoli za jedinstvenu prijavu [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2018 [cited 2024 November 27] Available at: https://urn.nsk.hr/urn:nbn:hr:168:048333

Ž. Galovac, "Sigurnosni protokoli za jedinstvenu prijavu", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2018. Available at: https://urn.nsk.hr/urn:nbn:hr:168:048333

Metadata
TitleSigurnosni protokoli za jedinstvenu prijavu
Title (english)Single sign-on security protocols
AuthorŽeljka Galovac
MentorAnte Đerek (mentor)
Committee memberAnte Đerek (predsjednik povjerenstva)
Committee memberMartin Soldić (član povjerenstva)
Committee memberMiroslav Popović (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2018-09-05, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
U ovom radu opisani su sigurnosni propusti karakteristični za autentifikaciju i autorizaciju korisnika na web servisu koji dovode do krađe identiteta. U pokušaju sprječavanja sigurnosnih propusta, nastale su kriptografske tehnike čiji je cilj povećati sigurnost na internetu. Unatoč metodama zaštite, nemoguće je izbjeći korisnikov neoprez, stoga su se razvili sustavi u kojima su lozinke eliminirane. Oni rade povrh sigurnosnih protokola za jedinstvenu prijavu (SSO) - jedna vjerodajnica za transparentan pristup ostalim servisima. SSO protokoli OAuth i SAML su detaljno obrađeni sa sigurnosne strane, a većina teksta je potkrijepljena primjerima iz praktičnog rada. Usko povezan sa SSO uslugom je federativni identitet, a hrvatska Vlada nije bila iznimka pri stvaranju takve infrastrukture - NIAS, koji obavlja identifikaciju za čitav spektar web servisa dostupnih na sustavu e-Građani. Sustavu e-Građani nedostaje servis za sigurno dijeljenje datoteka, stoga je u sklopu ovog rada implementiran. Web aplikacija SafeShare razvijena je povrh SAML protokola te OneLogin davatelja identiteta. Uz minimalne preinake, aplikacija bi radila na nacionalnom sustavu NIAS u sklopu sustava e-Građani.
Abstract (english)
This paper describes security vulnerabilities that are typical for user's authorization and authentication on the web services leading to identity theft. In an attempt to improve data confidentiality, a number of cryptographic techniques have been created. Despite all of the means to prevent oversights, it is impossible to avoid user's tendency to reuse their passwords, which lead security experts to devise a new principle where passwords are eliminated. Such systems rely on Single sign-on (SSO) protocols - one credential is enough for transparent access to the other services. SSO protocols OAuth and SAML are thoroughly analysed from security perspective and most examples given in this paper are retrieved during development. Closely associated with SSO service is federal identity and Croatian Government was'nt an exception in creating such an infrastructure - NIAS, which identifies users for the entire spectrum of web services available on e-Građani. e-Građani is missing service for safe file sharing, therefore, SafeSharing web application was developed to solve this issue. The SafeShare was developed using the SAML protocol and the OneLogin IdP. With minimal modifications, the web application would work on the national NIAS within e-Građani system.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:048333
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2019-03-13 20:22:18