Americas

  • United States

Asia

Oceania

by Dave Gradijan

Network World: Group Offers Open Source Security Code to Java Developers

News
Mar 11, 20082 mins
Build AutomationCSO and CISO

Open source identity community OpenLiberty.org Monday announced the release of open source code to help Java developers build privacy and security features into their Web 2.0, component-based and mobile applications.

OpenLiberty-J, is an implementation of privacy specifications from the Liberty Alliances Identity Web Services Framework (ID-WSF) 2.0, and gives developers tools to build applications that can validate and secure transactions.

The OpenLiberty-J implementation is a sub-set of ID-WSF 2.0 specifications that includes privacy features, including the ability to have a unique identifier for each individual transaction. The unique identifiers can be tied together using Liberty-based security protocols and features discovery and other tools so users can aggregate their identifiers into a profile. The goal is to help users manage online relationships without having to sacrifice privacy.

“Today’s news on one side is a call to action to get people involved and expand the features of OpenLiberty,” said Brett McDowell, executive director of the Liberty Alliance. He said the intent is to eventually get open source privacy and security specifications ramped up for .Net, PHP and Ruby developers.

OpenLiberty-J provides developers with a library of open source code. The libraries only address the needs of service providers and relying parties in an identity transaction. The needs of identity providers are not addressed.

OpenLiberty-J is based on Java 2 Platform, Standard Edition (J2SE), and open source XML, Security Assertion Markup Language, and Web services libraries from the Apache Software Foundation and Internet2, including the Shibboleth Project’s OpenSAML.

Developers who use OpenLiberty-J will be able to test their applications against the Liberty Alliance servers, according to McDowell.

OpenLiberty-J also will be included in formal Liberty Alliance interoperability testing in the Fall. OpenLiberty-J has already passed informal interoperability against the open source ZXID tools and Symlabs products that are certified Liberty Web Services interoperable.

By John Fontana, Network World (US)