Internship: Securing a TV Platform

**Description of Assignment** ----------------------------- Identity and Access Management (IAM) plays a crucial role in securing modern digital platforms. In this internship assignment, you will use Curity as an Access Management tool to set up a secure registration and access structure for applications or clients within a platform environment. A fictional customer, IdenTV, wants to develop a secure way to connect its digital platform to external applications. It is looking for a solution that uses Curity to manage registration, authentication and authorisation. This scenario involves a set-top box: a device that users connect to their television at home to access digital content such as streaming services or interactive applications. For this assignment, the set-top box will be emulated, meaning that a software simulation of the device will be used to reproduce how it operates and communicates with the platform. The set-top box acts as a client that connects to the IdenTV platform. Because the box has access to personal and potentially sensitive data, communication between the set-top box and the platform must be properly secured. The assignment is therefore to design a secure IAM architecture in which the set-top box registers as a client with Curity and subsequently accesses the platform through standardised protocols such as OAuth and OpenID Connect. **What will you do?** * Set up your own Curity environment for testing and development. * Enable end users to register their box easily and securely through a secure protocol. * Ensure secure communication between Curity and the registered applications. * Implement resource protection so that only authorised clients can access specific endpoints or data. * Document the entire process and explain how it can be readily applied in a production environment. **What technical skills will you learn?** * Setting up and managing a Curity Identity Server. * Secure communication between platforms and applications. * Dynamic client registration * Certificate management and mTLS. * Working with federation protocols such as OAuth 2.0, OIDC and SAML. * Identity and Access Management **What soft skills will you develop?** * Communication skills: reporting and documenting clearly and professionally, and collaborating with colleagues and stakeholders. * Collaboration: working effectively within a multidisciplinary team in an agile environment. * Problem-solving: analysing technical challenges and resolving them independently or in consultation with others. * Self-organisation: taking responsibility for your tasks, planning and progress. * Critical thinking: substantiating your choices and continuously improving based on feedback and evaluation. * Customer focus: considering user needs and the business context when designing solutions. **Project Methodology** ----------------------- * The internship assignments follow the Scrum project methodology to provide a structured and efficient approach to tasks and subtasks. * This reflects IdentIT’s approach to projects. * Scrum is a flexible framework that: + Promotes collaboration + Encourages adaptability + Ensures transparency. * The work is organised into time-boxed iterations called sprints: + Each sprint lasts 2 to 3 weeks. + Each sprint has clear objectives and tasks. * At the start of each sprint: + The intern(s) and supervisor(s) hold a sprint planning session. + The objectives are defined. + A sprint backlog is created. * During the sprint: + Weekly stand-up meetings are held. + Progress is discussed. + Any obstacles are identified and addressed. * At the end of each sprint: + A sprint review is held. + Where possible, a demo is given. + Feedback is collected. * Scrum contributes to a collaborative and adaptable working environment. * The aim is to achieve the best possible results within the given timeframe. **MVP** ------- The minimum feature set we expect is: * A set-top box that can register * Secure communication between the client and Curity * Enforcement of authorisation rights based on the signed-in user to control access to specific content **Expected Outcomes** --------------------- The following deliverables are expected at the end of the assignment: * A technical analysis of the problem * The architecture of the required components * An implementation that meets the MVP requirements, plus any additional features * A demo of the end-to-end solution * Documentation