A Privacy Enabled Service Authorization Based on a User-centric Virtual Identity Management System

Abstract

User trust and empowerment (in terms of their personal data control) are areas that must be addressed thoroughly when talking about identity and business models for distributed communication systems. Protecting the privacy of users is a challenging problem for identity management systems, which can only be achieved if it gives users complete control over their identity data. However, none of the existing solutions offers this possibility.Based on a user-centric virtual identity defined by EU IST project Daidalos, this paper proposes an effective infrastructure to authorize the privacy-enabled pervasive service, which protects the context-driven access policies for online services in order to avoid attacks by malicious eavesdroppers. In the proposed infrastructure, SMAL and Diameter are used to securely protect and deliver authenticated and authorized entities and XACML is used to authorize the user-level privacy policy. The proposed infrastructure is partially integrated into the Daidalos demonstration platform.

Examining virtual identity profiles of social network users with respect to certain variables

“…In the study, the Social Network Identity Management Scale (SNIMS) was developed to determine the virtual identities of social network users ( Figure 1). Before preparing the scale items, studies on virtual identities (Chen, 2007;Diehl & Prins, 2008;Jin, 2012;Jin, 2013;Koles & Nagy, 2012;Nagy, 2008;Ribeiro, 2009) were examined to form the virtual identity framework. Within the framework of the variables to predict virtual identity, studies in international literature were examined in terms of 15 cases "Virtual identities used by users in virtual environments; factors influential on users' creating different virtual identities; reasons for using social network sites with anonymous or non-anonymous profiles; factors influential on determining the virtual identities in anonymous sites; the extent to which virtual identities of users reflect their real identities; the relationship between virtual identity and approval; influence of the society on individuals' behaviors in virtual environment; relationship between motivation and participation in virtual environment; reasons for creating idealized virtual identities and difficulties in managing these identities; role of observers and of subjective profile components in research on virtual identity formation; reasons why users create more than one virtual identity; influence of public self-consciousness on individuals' use of different identity elements; social dimensions of virtual identity and its motivational aspect; role of social communication in transition from the real identity in the real world to virtual identity; causes and results of virtual self-discrepancy".…”

“…Ölçek geliştirme çalışmasına, alanyazın taramasıyla başlanmış ve sanal kimlik ile ilgili yapılan çalışmalar incelenmiştir. Ölçek maddeleri oluşturulmadan önce alanyazında sanal kimlik üzerine yapılan çalışmalar (Back, Stopfer, Vazire & Gaddis, 2010;Chen, 2007;Diehl & Prins, 2008;Jin, 2012;Jin, 2013;Koles & Nagy, 2012a;Koles & Nagy, 2012b;Pnagy, 2008;Ribeiro, 2009) incelenerek sanal kimlik çerçevesinin oluşturulması amacıyla incelenmiştir. Sanal kimliği yordayabilecek değişkenler çerçevesinde uluslararası alanyazındaki çalışmalar 15 durum altında incelenmiştir.…”

Virtual Identity Performance Evaluations of Anonymous Authentication in IDaaS Framework

“…Moreover, the network layer unlinkability concept can be achieved using anonymization techniques proposed in [38]. Another access domain which is the Mobil-IP (MIP) considered the concept of V ID framework [39] to cope with the mobility either security or privacy issues.…”

A Mobile-Based Attribute Aggregation Architecture for User-Centric Identity Management

“…Therefore providing a practical solution for the users Internet reachability challenge [8]. The use of smartphones for identity management is currently also recognized as essential for enhancing security and privacy [9,10,11] and has been proved to play a crucial role on more flexible user-centric models [12,13]. Based on these facts, the proposed architecture adopt the use of smartphones as an Authorization Broker in order to grant users a dynamic and more active role over their identity attributes.…”