On Secure Implementation of an IHE XUA-Based Protocol for Authenticating Healthcare Professionals

The importance of the Electronic Health Record (EHR) has been addressed in recent years by governments and institutions.Many large scale projects have been funded with the aim to allow healthcare professionals to consult patients data. Properties such as confidentiality, authentication and authorization are the key for the success for these projects. The Integrating the Healthcare Enterprise (IHE) initiative promotes the coordinated use of established standards for authenticated and secure EHR exchanges among clinics and hospitals. In particular, the IHE integration profile named XUA permits to attest user identities by relying on SAML assertions, i.e. XML documents containing authentication statements. In this paper, we provide a formal model for the secure issuance of such an assertion. We first specify the scenario using the process calculus COWS and then analyse it using the model checker CMC. Our analysis reveals a potential flaw in the XUA profile when using a SAML assertion in an unprotected network. We then suggest a solution for this flaw, and model check and implement this solution to show that it is secure and feasible

Chen-Ruan cohomology of ADE singularities

We study Ruan's \textit{cohomological crepant resolution conjecture} for orbifolds with transversal ADE singularities. In the $A_n$-case we compute both the Chen-Ruan cohomology ring $H^*_{\rm CR}([Y])$ and the quantum corrected cohomology ring $H^*(Z)(q_1,...,q_n)$. The former is achieved in general, the later up to some additional, technical assumptions. We construct an explicit isomorphism between $H^*_{\rm CR}([Y])$ and $H^*(Z)(-1)$ in the $A_1$-case, verifying Ruan's conjecture. In the $A_n$-case, the family $H^*(Z)(q_1,...,q_n)$ is not defined for $q_1=...=q_n=-1$. This implies that the conjecture should be slightly modified. We propose a new conjecture in the $A_n$-case which we prove in the $A_2$-case by constructing an explicit isomorphism.Comment: This is a short version of my Ph.D. Thesis math.AG/0510528. Version 2: chapters 2,3,4 and 5 has been rewritten using the language of groupoids; a link with the classical McKay correpondence is given. International Journal of Mathematics (to appear