The credentials pattern

TL;DR: This work identifies missing aspects in existing classifications and the similarities between design and security pattern classification and introduces two new classification schemes based on application domains formed by a literature survey on security patterns published in the period of 1997 to mid-2012.

TL;DR: This work introduces the concept of "abstract" security patterns that deal with abstract security mechanisms, rather than concrete implementations, and shows an organization of abstract security patterns and concrete ones into hierarchies.

TL;DR: This paper presents a comprehensive, pattern-oriented software engineering approach to authorization for general distributed systems - with particular applicability to distributed collaborative systems - that allows developers to build custom, application-specific conceptual authorization models in a simple yet extensible manner.

TL;DR: This work presents the Controlled Access Session pattern for describing how sessions can limit the rights of a user, and considers a pattern for Session-Based Role-Based Access Control, intended for organizations in which job functions form the basis for privilege assignments.

TL;DR: Three patterns that correspond to the most common models for security are discussed: Authorization, Role-Based Access Control, and Multilevel Security, which can be applied in all the levels of the system.

TL;DR: A set of patterns that include a basic authorization pattern that is the basis for patterns for the well-established discretionary and role-based access control models are presented.

TL;DR: The Authenticator pattern describes a general mechanism for providing identification and authentication to a server from a client using an authentication negotiation object which then provides the protected object only after authentication is successful.

TL;DR: An architectural pattern for identity management is defined that centralizes the administration of a security domain's subjects and allows to federate multiple identities across multiple organizations under a common identity.