6th European Conference - Academic Conferences

Maria Semmelrock-Picej et al.
in collaborations operated by SPIKE we identified some technical requirements which must be fulfilled
and which are presented in the next chapter:
3.2.1 Overview
SPIKE Identity Federation Module (short SPIKE/IF) ist the building block in the architecture (see next
figure) for the setting up of collaborations between companies, defining roles and resource bundles
and the access management of federated identities during collaboration.
In Figure 6 the collaboration model is shown. Before a company can take part in any collaboration,
the phase “collaboration setup” has to be passed. This phase describes the tasks of a company’s
administrator, to provide the required resources. The most basic resource to be provided is the
network configuration.
Figure 6: Identity federation life cycle model
3.2.2 Setting up a collaboration
In our project there are different types of collaboration possible, depending on who is carrying out the
service provider function in the collaboration.
It is that users of a company can only be assigned to services of a partner company by the
responsibles of their own company (security, reducing complexity and keep flexibility). Only the hub
company can extend a collaboration with additional partner companies (security aspect). In the
following the setting up of a collaboration is visualized.
Unfortunately, nowadays collaborative applications commonly use centralized infrastructures. The use
of such systems has generated a huge interest in decentralized systems so that in our case different
types of collaboration are possible depending on who is carring out the service provider funtion in the
collaboration. In the following the centralized collaboration is presented (figure 8):
247