Cross-domain identity management remains a major challenge for potential WebRTC adopters. In order to provide a global web-based communication system, it is critical to locate the destination called party, map the identity to the user device, and provide mutual authentication for both caller and called party. In this paper, we present a novel identity management and user discovery framework that enables callers to search and locate users across service domains. The identity management is decoupled from the used calling service, allowing users to manage their profiles and credentials independently of the applications. The framework is designed to preserve privacy and exploit web technology to gain trust and contact list management

No abstract

No abstract

Digital Identity has grown separately in the IP Multimedia Subsystem (IMS) and the Internet in general. On the one hand secure but walled garden services are offered on the other hand the focus is on openness and third party integration. However, future Telco-business needs an inter-working of IMS and Internet. This paper discusses use cases, economical benefits and technical solutions for bridging these two worlds based on the findings presented also in an upcoming whitepaper from the Telecommunication Identity work group of the Kantara Initiative.

title = {{Cross-Domain} {Discovery} of {Communication} {Peers}: {{Identity Mapping}} and {{Discovery Services}} ({{IMaDS}})}, booktitle = {2017 {{European Conference}} on {{Networks}} and {{Communications}} ({{EuCNC}})}, publisher = {{IEEE}}, year = {2017}, pages = {1--6} } Abstract-The upcoming WebRTC-based browser-to-browser communication services present new challenges for user discovery in peer-to-peer mode. Even more so, if we wish to enable different web communication services to interact. This paper presents Identity Mapping and Discovery Service (IMaDS), a global, scalable, service independent discovery service that enables users of web-based peer-to-peer applications to discover other users whom to communicate with. It also provides reachability and presence information. For that, user identities need to be mapped to any compatible service identity as well as to a globally unique, service-independent identity. This mapping and discovery process is suitable for multiple identifier formats and personal identifying properties, but it supports user-determined privacy options. IMaDS operates across different service domains dynamically, using context information. Users and devices have profiles containing context and other specific information that can be discovered by a search engine. The search results reveal the user's allocated globally unique identifier (GUID), which is then resolved to a list of the user's service domains identities, using a DHT-based directory service. Service-specific directories allow tracking of active endpoints, where users are currently logged on and can be contacted.