A Smart Card Based Solution for User-Centric Identity Management

Abstract

Abstract. This paper presents a prototype of a previously proposed user-centric identity management system using trusted modules. The trusted module, implemented using a smart card, can retrieve user attributes from identity providers and offer them to service providers, after authentication. This paper allows an evaluation of the practical feasibility of the identity management architecture and provides insight in several design decisions made during the prototype implementation. Also, the cryptographic protocols implemented in the prototype are discussed.

User-Centric Identity Management Using Trusted Modules

“…This section first matches the solution with the requirements defined before, followed by a discussion on the overall functionality and possible extensions. For an in-depth evaluation of a prototype implementation on a smart card, we refer to [18]. [18] demonstrates the practical feasibility of the proposed architecture, presents concrete protocols that realize the security and privacy requirements and provides insight in the most important design decisions made during the instantiation of the architecture.…”

Using a Smartphone to Access Personalized Web Services on a Workstation

“…Software components for these modules are typically developed using the Java-Card subset of the Java programming language. This facilitates portability of the the proof-of-concept from [14] to the mobile phone, as it is also developed using the same technology.…”

Commercial Home Assistance (eHealth) Services

“…All issued cards will share a common authentication key pair (SK co , PK co ) (cfr. also [15] for the rationale behind this privacy-friendly identity card). The card is necessary to authenticate the base station towards the dispatching center and the caregivers, and to sign or decrypt information.…”