HERAS-AF Logo Holistic Enterprise-Ready Application Security Architecture Framework




Who is using HERASAF?

We want to thank all the users of our software components for their trust.

Not yet on the list? Just contact us...

Forcare B.V. is a Dutch software company providing software products and services for healthcare. Its focus is interoperability between healthcare IT systems.
Forcare B.V. provides products and services to allow existing systems to (electronically) interconnect to share and exchange patient data. 

Itartis designs, develops and maintains efficient work environments. The central concern of the company is the question of how the users (i.e, employees or clients) can deploy their resources in both a user orientated and efficient manner into the business process. With their human-centered company portals which enable an intelligent connection between the elements of, information, collaboration and business process, Itartis is creating for the user, clever, virtual working environments.

Orange PrimeLife will address the core privacy and trust issues pertaining to the challenges of how to protect privacy in emerging Internet applications such as collaborative scenarios and virtual communities; and how to maintain life-long privacy. Its long-term vision is to counter the trend to life-long personal data trails without compromising on functionality. It will build upon and expand the FP6 project Prime that has shown how privacy technologies can enable citizens to execute their legal rights to control personal information in on-line transactions. The main objective of the project is to bring sustainable privacy and identity management to future networks and services.
PrimeLife is developped by IBM Research and various other companies and universities: Consortium.
Orange HERASAF is built into the core of a beta version of an Orange (http://www.orange.com) privacy management service, enabling Orange users to manage access permissions to their personal data and APIs services shared with third party services. More precisely, the "user privacy" service checks if a third party service is authorized to access to Orange users' personal data (like profile or geolocation)/applications (calendar, address book...). A web interface available to Orange users offers a central point to manage access control policies and access history of their personal data (http://privacy.orange.fr).
EGEE "The Enabling Grids for E-sciencE (EGEE) project is funded by the European Commission and aims to build on recent advances in grid technology and develop a service grid infrastructure which is available to scientists 24 hours-a-day." (http://public.eu-egee.org).

EGEE uses the HERASAF XACML implementation for their Authorization Framework (https://twiki.cern.ch/twiki/bin/view/EGEE/AuthorizationFramework).