外文文献：卡尔马联盟，一个北欧身分联合会聯盟.pdf

KALMAR UNION, A CONFEDERATION OF NORDIC IDENTITY FEDERATIONS Mikael Linden CSC - IT Center for Science Ltd, P.O. Box 405, FI-02101 Espoo, Finland mikael.linden@csc.fi David Simonsen WAYF-DK - Where Are You From, The Agency for Libraries and Media, H.C. Andersens Boulevard 2, DK-1553 Copenhagen V, Denmark david@wayf.dk Andreas Åkre Solberg UNINETT, NO-7465 Trondheim, Norway andreas.solberg@uninett.no Ingrid Melve UNINETT, NO-7465 Trondheim, Norway ingrid.melve@uninett.no Walter M. Tveter Center for Information Technology, University of Oslo, Oslo, Norway w.m.tveter@usit.uio.no Abstract 1 This paper reports on Kalmar Union , the first effort to cross-link national identity federations for research and education. So far, the participants in the confederation are the academic identity federations in the five Nordic countries: Finland, Norway, Denmark, Sweden and Iceland. Users are able to reuse their login credentials when accessing services across the Nordic countries. Services will more easily be able to expand in the Nordic region and institutions will be able to provide more and better services to their users. In the Kalmar Union project, policy development was chosen as the task to start with. The focus was on simplicity of entering the confederation, risk adjustment and minimum requirements for identity management and privacy protection. The legal shape of the confederation and its reasoning is presented in this paper. The technical architecture of Kalmar Union allows interconnecting full mesh Shibboleth federations (Finland, Sweden) with hub-and-spoke federations (Norway, Denmark and Iceland). A simplified profile of SAML 2.0 is used end-to-end, eliminating the need for protocol translating border elements. Systems for automatic aggregation of SAML 2.0 meta