A dynamic federated identity management approach for cloud-based environments

Bendiab, Gueltoum; Boucherkha, Samia

doi:10.1145/3018896.3025152

Cited by 5 publications

(3 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several studies proposed an approach for a dynamic cloud environment [63], [65], [66]. In the study, [63], the trustworthiness of all the participants is calculated based on predefined trust features before the federation process is carried on.…”

Section: A Broker-based Federationsmentioning

confidence: 99%

A Survey on Identity and Access Management for Cross-Domain Dynamic Users: Issues, Solutions, and Challenges

et al. 2023

View full text Add to dashboard Cite

Access control management in a heterogeneous cloud environment, where the number of users is growing, is a daunting task for service providers. Efficiency is heavily reliant on shared resources in a modern cloud computing culture. Although data or service sharing is highly appreciated for collaborative projects, preserving identity and access management security is challenging in this context. The difficulties encountered are diverse, including a single point of failure, incompatibility, dynamic user groups, trust establishment, and revocation. Despite extensive research, certain obstacles and issues need to be addressed. In this article, challenges in access management in centralized and decentralized identity governance are grouped into different categories and accompanied by background information on the topic. Studies and implemented projects have been evaluated regarding their value and flaws. Traditional approaches, such as centralized and federated identity, as well as more futuristic methods, such as blockchain-based decentralized identity, AI/ML access management, and ABE schema, have been investigated while writing this paper. A comparative evaluation of the proposed studies has been included, where the differences and similarities can be observed.

show abstract

Section: A Broker-based Federationsmentioning

confidence: 99%

A Survey on Identity and Access Management for Cross-Domain Dynamic Users: Issues, Solutions, and Challenges

et al. 2023

View full text Add to dashboard Cite

show abstract

“…Access Control Models. Cloud platforms typically use federated identity management [65,89] for access control which is insufficient to define expressive policies required in serverless application workflows. Graph based access control models [68,81,91] have used graphs to express hierarchical nature of user roles.…”

Section: Related Workmentioning

confidence: 99%

Workflow Integration Alleviates Identity and Access Management in Serverless Computing

Sankaran

Datta

Bates

2020

Annual Computer Security Applications Conference

View full text Add to dashboard Cite

“…The approach of dynamic cloud federation by Bendiab evolves from a dynamic cloud federation to blockchain with fuzzy cognitive maps dynamic trust model [43] [11] [10] [12]. In [43], the authors describe the basic approach with the entities user, cloud service provider (CSP), IdP, federation provider (FP), and certificate authority. The token is sent from one FP to another FP for validation and transformation.…”

Section: User-centric Identity Management With Ssi As Cloud Federationmentioning

confidence: 99%

An overview of limitations and approaches in identity management

Pöhn

Hommel

2020

Proceedings of the 15th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

Identity and access management (I&AM) is the umbrella term for managing users and their permissions. It is required for users to access different services. These services can either be provided from their home organization, like a company or university, or from external service providers, e. g., cooperation partners. I&AM provides the management of identifiers with the attributes, credentials, roles, and permissions the user has. Today, the requirements have evolved from simply accessing individual web services in the internet or at a company to the majority of all IT services from different service providers with various accounts. Several identity management models have been created with different approaches within.In order to adjust to heterogeneous environments, use cases, and the evolution of identity management, this paper extends known requirements for identity management. Existing models and approaches for identity management are mapped to the derived requirements. Based on the mapping, advantages, disadvantages, and gaps are identified. Current approaches suffer, as an example, from trustworthiness and liability issues. Interoperability issues are even more inherent as the approaches partly develop apart, forming an heterogeneous environment. The results from this analysis emphasize the need for one holistic identity management framework.

show abstract

A dynamic federated identity management approach for cloud-based environments

Cited by 5 publications

References 5 publications

A Survey on Identity and Access Management for Cross-Domain Dynamic Users: Issues, Solutions, and Challenges

A Survey on Identity and Access Management for Cross-Domain Dynamic Users: Issues, Solutions, and Challenges

Workflow Integration Alleviates Identity and Access Management in Serverless Computing

An overview of limitations and approaches in identity management

Contact Info

Product

Resources

About