Nafise Fareghzadeh - Computer Engineering Department, Islamic Azad University, Khodabandeh Center, Iran
Mir Ali Seyyedi - Computer Engineering Department, Science and Research Branch, Islamic Azad University, Tehran, Iran

Despite the widespread acceptance of E-Learning avails and services, information security in E-Learning, trust and dependability issues still remain the biggest challenge. authentication and authorization are at the core of any secure E-Learning environment. Authentication and authorization infrastructures are middleware systems consisting of a set of protocols that allow the delegation of authentication and authorization issues to different instances. Authentication is executed by the user’s organization and authorization by resources such users want to access. There are different common infrastructures that are used in E-Learning environment widely, but most of them suffer from some defects. Thus, the main objective of this paper is to obviate these defects and propose a comprehensive approach and efficient authentication and authorization infrastructure and design a controlled and secure infrastructure of accessing different user’s databases for delivery and distribution of single sing-on web service.

Authentication, Authorization, Central Authentication Server, Repository, Core Web Service