Point of Access for Providers of Information - Wikipedia, the free ...
Point of Access for Providers of Information. From Wikipedia, the free encyclopedia ... (Point of Access for Providers of Information) is a system for providing ...
en.wikipedia.org

High Speed Internet, Phone & Satellite TV - FairPoint Communications
You can count on FairPoint to bring high-speed Internet access, reliable phone and television service to Maine, New Hampshire and Vermont for your home and business.
www.fairpoint.com

Information for Internet Access Providers
Information on advertising Internet access providers and pointers to other ... This Meta-List point to lists of providers, not individual Internet providers. ...
herbison.com

PAPI - Wikipedia, the free encyclopedia
Point of Access for Providers of Information. Precision Approach Path Indicator ... Public And Private Information a proposed IEEE standard ...
en.wikipedia.org

ISP ( Point-of-Presence, Online Information Access Services, Internet ...
This is also known as Point-of-Presence, Online Information Access Services, ... VeriTest Services for Internet Service Providers ...
www.bitpipe.com

ProviderOne information for Providers - DSHS
November 7, 2008 - Providers can learn how to secure access and register in ... Detailed information about the new ProviderOne Pharmacy Point-of-Sale system ...
fortress.wa.gov

Access/Information
Through our On-point Research we target the most ... A/I is the largest independent research company and provider of insurance filings in Colorado. ...
www.access-information.com

DE Medical Assistance Program
Providers who are using the DrFirst point-of-care system will have an enhanced ... For more information, please call Pharmacy Services at 1-800-999-3371, ...
www.dmap.state.de.us

[Access Point Medical] - HOME
... of the stated Terms of Use herein for this Website, Access Point Medical ... Information reasonably sufficient to permit the service provider to contact the ...
www.accesspointmedical.com

OMAP - PA PROMISe(TM) Provider Handbook - NCPDP 5.1/Pharmacy Billing
... back of the ACCESS card has a magnetic stripe for "swiping" through a point-of ... This information will be available to the provider for two years ...
www.dpw.state.pa.us

Warning: mkdir() [function.mkdir]: Permission denied in /home/webs/affiliatelib2/CacheManager.php on line 12

Warning: mkdir() [function.mkdir]: No such file or directory in /home/webs/affiliatelib2/CacheManager.php on line 12

Warning: fopen(/home/templatecore2cache//*cluesnet.com/08/081735f2b3ac27b995df26c83e5134b45cee460e.tc2cache) [function.fopen]: failed to open stream: No such file or directory in /home/webs/affiliatelib2/CacheManager.php on line 130

Warning: fwrite(): supplied argument is not a valid stream resource in /home/webs/affiliatelib2/CacheManager.php on line 131

Warning: fclose(): supplied argument is not a valid stream resource in /home/webs/affiliatelib2/CacheManager.php on line 132

PAPI (Point of Access for Providers of Information) is a system for providing access control to restricted information resources across the Internet. It intends to keep authentication as an issue local to the organization the user belongs to, while leaving the information providers full control over the resources they offer. The authentication mechanisms are designed to be as flexible as possible, allowing each organization to use its own authentication schema, keeping user privacy, and offering information providers data enough for statistics. Moreover, access control mechanisms are transparent to the user and compatible with the most commonly employed Web browsers and any operating system.

The system consists of two independent elements: the authentication server (AS) and the point of access (PoA). This structure makes the final system much more flexible and able to be integrated to different environments. There is no need of a one-to-one mapping between ASes and PoAs: a given PoA may manage to deal with requests from any number of ASes and direct them to any number of web servers.

Authentication Server (AS) The purpose of the AS is to provide users with a single authentication point and make available to them (in a completely transparent manner) all the temporary keys that will let them access the services they are authorized to.

Point of Access (PoA) The PoA manages actual access control to a set of web locations for a given organization. The information provider (or the owner of the web servers) have the responsibility of managing this point of access. A PAPI PoA can be adapted to any web server, whatever its implementation is. Moreover, a given web server can have more than one PoA, and a PoA can control more than one web server. PoAs can be hierarchically combined into groups controlled by a group-wide PoA (a GPoA), where initial access attempts are to be validated. This way, only the temporary keys for the GPoAs at the top of the hierarchy must be initially loaded by the user's browser. A PoA can also be configured to directly query authentication servers for information about users, so no initial loading of temporary keys is needed. This ability can be, of course, integrated within PoA hierarchies as well.

Other important property of this system is that it is completely compatible with any other access control system in use, since it does not impose any constraints on additional procedures used for these purposes. In other words, PAPI access control is completely orthogonal to procedures such as password protection, IP filters, TLS-based access control, etc.

The central motto for PAPI is Authentication is a local matter, and authorization too.

Authentication occurs at the user's organization, possibly accessing data that must not be disclosed in any case. Once authenticated, the user is automatically pointed to the entry point of the PoA. It is important to remark that the AS is not sending any user-provided data to the PoA. It prepares an assertion (as required by the PoA) about the user and signs it using its private key. The only constraint that any PoA imposes on an AS assertion about an user is that the identifier must be unique at least during the lifetime of the tokens the PoA is going to provide. Of course, information should be also enough to pass through the rules the PoA enforces, but the AS is never required to disclose any private information.

The PoA receives this chunk of information, signed by the AS, and decides whether to grant access to the user or not. It is important to note that when we refer to a PoA trusting an AS, we are not talking about a PoA permitting any access request coming from that AS, but about the PoA trusting the assertions the AS makes. That means that, if a PoA trusts an AS, the (digitally signed) assertion of ``This is user X of group Y‘‘ made by the AS is going to be trusted by the PoA. And the PoA decides, according to the assertion and its policy, to grant access or not. Authorization is, again, a local matter to the organization operating the PoA.

External links

• Official PAPI home page