A design of usable and secure access-control APIs for mashup applications

Mashups, which are applications that are developed rapidly by combining multiple Web applications, are currently gathering much attention. One issue arising when creating mashups using data that is subject to access control is the difficulty in adding authentication and access control functions without losing the advantage of rapid development. We discuss the design and prototype implementation of an access control platform called SAXAE. SAXAE supports more secure and easy development of mashups. Its API enables both more secure and easier to use data protected by access control protocols.