Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
|
 |
Notarized Federated Identity Management for Web Services
| |
|
Notarized Federated Identity Management for Web Services
Michael T. Goodrich1 , Roberto Tamassia2 and Danfeng Yao2 
| (1) |
Department of Computer Science, University of California, Irvine, CA 92697, USA |
| (2) |
Department of Computer Science, Brown University, Providence, RI 02912, USA |
Abstract
We propose a notarized federated identity management model that supports efficient user authentication when providers are unknown to each other.
Our model introduces a notary service, owned by a trusted third-party, to dynamically notarize assertions generated by identity
providers. An additional feature of our model is the avoidance of direct communications between identity providers and service
providers, which provides improved privacy protection for users. We present an efficient implementation of our notarized federated
identity management model based on the Secure Transaction Management System (STMS). We also give a practical solution for
mitigating aspects of the identity theft problem and discuss its use in our notarized federated identity management model.
The unique feature of our cryptographic solution is that it enables one to proactively prevent the leaking of secret identity
information.
This work was supported in part by the National Science Foundation under grants IIS–0324846, CCF–0311510 and CNS–0303577,
and by IAM Technology, Inc. The work of the first author was done primarily as a consultant to Brown University.
Fulltext Preview (Small, Large)
|
|
|
|
|
|