Securing GIS data
0 likes•1,824 views
The document discusses the security measures for GIS data using the Geomajas framework, highlighting the importance of secure authentication methods such as certificates, biometrics, and tokens. It emphasizes the architecture that ensures no credential leakage and supports fine-grained policies while allowing for single sign-on capabilities. The conclusion is that Geomajas facilitates the construction of a highly secure GIS system with robust access controls.
Securing GIS data
- 1. Securing GIS data by Joachim Van der Auwera
- 2. Secure Authentication Support strong credentials : certificates, eID, biometric Authorization Powerful and fine grained No credential leakage
- 4. Web server Data source Data source Browser view Filter & display data Get application (cred) Get data (cred) Get data (cred) View source / firebug Wms?user=bla&password=alb Unfiltered data internet The bad Web client
- 5. Geomajas GIS application framework for the web
- 6. Integrate GIS data sources
- 7. Make data available on the web (view / edit)
- 8. Secure
- 9. Fast
- 10. Powerful
- 11. Java : Spring, Hibernate,
- 12. GWT, GeoTools
- 13. Geomajas Data source Data source Browser view Display data View source / firebug internet Wms?token=xyz Filtered data Get application (token) DMZ LAN/WAN Get data (token) Architecture Web client
- 19. Area (CRUD) What with overlap, partly in area Individual features (CRUD)
- 20. Individual feature attributes (CRUD)
- 21. Custom application policies (extend security context)
- 22. Geomajas Data source Browser view Display data Get data (token) Get data (cred) View source / firebug Wms?token=xyz Filtered data filter ¶ · ¸ ¹ º » Security proxy Web client
- 23. Login – Single Sign On Login is external
- 24. Application does not know credentials
- 25. Security context Based on token
- 26. Allows access to policies
- 27. Snooping Should all communication be encrypted?
- 28. Login credentials : yes
- 29. Token : no (only valid for a while)
- 30. Data : once transmitted it can be stolen Always at the client
- 31. In transit when not encrypted
- 32. Conclusions Geomajas allows you to build highly secure GIS system supporting Single sign-on
- 33. Highly secure credentials (optional)
- 36. No leakage of unauthorized data
- 37. Questions? Thanks! Contact me : Mail : [email_address] Blog : http://blog.progs.be/ Twitter : @joachimvda http:// www.geomajas.org http:// www.geosparc.com