Biblioteca para a realização de security token services

A família de especificações WS-* define um modelo de segurança para web services, baseado nos conceitos de claim, security token e Security Token Service (STS). Neste modelo, a informação de segurança dos originadores de mensagens (identidade, privilégios, etc.) é representada através de conjuntos de claims, contidos dentro de security tokens. A emissão e obtenção destes security tokens, por parte dos originadores de mensagens, são realizadas através de protocolos legados ou através de serviços especiais, designados de Security Token Services, usando as operações e os protocolos definidos na especificação WS-Trust. O conceito de Security Token Service não é usado apenas no contexto dos web services. Propostas como o modelo dos Information Cards, aplicável no contexto de aplicações web, também utilizam este conceito. Os Security Token Services desempenham vários papéis, dependendo da informação presente no token emitido. São exemplos o papel de Identity Provider, quando os tokens emitidos contêm informação de identidade, ou o papel de Policy Decision Point, quando os tokens emitidos definem autorizações. Este documento descreve o projecto duma biblioteca software para a realização de Security Token Services, tal como definidos na norma WS-Trust, destinada à plataforma .NET 3.5. Propõem-se uma arquitectura flexível e extensível, de forma a suportar novas versões das normas e as diversas variantes que os Security Token Services possuem, nomeadamente: o tipo dos security token emitidos e das claims neles contidas, a inferência das claims e os métodos de autenticação das entidades requerentes. Apresentam-se aspectos de implementação desta arquitectura, nomeadamente a integração com a plataforma WCF, a sua extensibilidade e o suporte a modelos e sistemas externos à norma. Finalmente, descrevem-se as plataformas de teste implementadas para a validação da biblioteca realizada e os módulos de extensão da biblioteca para: suporte do modelo associado aos Information Cards, do modelo OpenID e para a integração com o Authorization Manager.

Impact of political violence, social trust, and depression on civic participation in Colombia

Civic participation is important for peacebuilding and democratic development; however, the role of mental health has been largely overlooked by policymakers aiming to stimulate engagement in civil society. This study investigated antecedents of civic participation in Colombia, a setting of protracted political conflict, using bootstrapped mediation in path analysis. Past exposure to violence, experience with community antisocial behavior, and perceived social trust were all significantly related to civic participation. In addition, depression mediated the impact of past exposure to political violence and perceived social trust, but not community antisocial behavior, on civic participation. In this context, findings challenged depictions of helpless victims and instead suggested that when facing greater risk (past violence exposure and community antisocial behavior), individuals responded in constructive ways, taking on agency in their communities. Social trust in one’s neighbors and community also facilitated deeper engagement in civic life. Relevant to the mediation test, interventions aiming to increase civic participation should take mental health into account. Limitations and possible future research are discussed.

An Assessment of Psychological Need in Emergency Medical Staff in the Northern Health and Social Care Trust Area

Setting: Psychological stress is increasingly recognised within emergency medicine, given the environmental and clinical stressors associated with the specialism. The current study assessed whether psychological distress is experienced by emergency medical staff and if so, what is the expressed need within this population? Participants: Participants included ambulance personnel, nursing staff, doctors and ancillary support staff within two Accident and Emergency (A&E) departments and twelve ambulance bases within one Trust locality in NI (N = 107). Primary and secondary outcome measures: The General Health Questionnaire (GHQ-12, Goldberg, 1972, 1978), Secondary Traumatic Stress Scale (STSS, Bride, 2004) and an assessment of need questionnaire were completed and explored using mixed method analysis. Results: Results showed elevated levels of psychological distress within each profession except ambulance service clinical support officers (CSOs). Elevated levels of secondary trauma symptomatology were also found; the highest were within some nursing grades and junior doctors. Decreased enjoyment in job over time was significantly associated with higher scores. Analysis of qualitative data identified sources of stress to include low morale. A total of 65% of participants thought that work related stressors had negatively affected their mental health. Participants explored what they felt could decrease psychological distress including improved resources and psychoeducation. Conclusion: There were elevated levels of distress and secondary traumatic stress within this population as well as an expressed level of need, on both systemic and support levels.

Enhancing the trust of location acquisition systems for critical applications and location-based security services

This paper identifies a number of critical infrastructure applications that are reliant on location services from cooperative location technologies such as GPS and GSM. We show that these location technologies can be represented in a general location model, such that the model components can be used for vulnerability analysis. We perform a vulnerability analysis on these components of GSM and GPS location systems as well as a number of augmentations to these systems.

The central role of communication in developing trust and its effect on employee involvement

Communication plays an important role in the development of trust within an organization. While a number of researchers have studied the relationship of trust and communication, little is known about the specific linkages among quality of information, quantity of information, openness, trust, and outcomes such as employee involvement. This study tests these relationships using communication audit data from 218 employees in the oil industry. Using mediation analysis and structural equation modeling, we found that quality of information predicted trust of one's coworkers and supervisors while adequacy of information predicted one's trust of top management. Trust of coworkers, supervisors, and top management influenced perceptions of organizational openness, which in turn influenced employees' ratings of their own level of involvement in the organization's goals. This study suggests that the relationship between communication and trust is complex, and that simple strategies focusing on either quality or quantity of information may be ineffective for dealing with all members in an organization.

Fear, trust and Aborigines : The historical experience of state institutions and current encounters in the health system

Troubled dynamics between residents of an Aboriginal town in Queensland and the local health system were established during colonisation and consolidated during those periods of Australian history where the policies of 'protection' (segregation), integration and then assimilation held sway. The status of Aboriginal health is, in part, related to interactions between the residents' current and historical experiences of the health and criminal justice systems as together these agencies used medical and moral policing to legitimate dispossession, marginalisation, institutionalisation and control of the residents. The punitive regulations and ethnocentric strategies used by these institutions are within the living memory of many of the residents or in the published accounts of preceding generations. This paper explores current residents' memories and experiences.