Integrating user Identity Management systems with the Host Identity Protocol

Abstract

Abstract-Identity Management (IdM) on the application layer improves the usability and security for end users by offering features like Single Sign-On and attribute provisioning. Unrelated approaches on the network layer introduce identity concepts to solve mobility problems and support multihoming. This paper describes a novel approach to the integration of IdM on the application layer with identity concepts introduced by the Host Identity Protocol (HIP). We propose an integrated architecture combining the advantages of both domains. In this scope, we tackle the mapping between the HIP namespace and user IdM namespace as well as we the management and assignment of user and host identities.The new architecture provides a unified view over user and host identities, enabling the exchange of user and host attributes, while it also provides enhanced security and network features.

Integrating RFID with IP Host Identities

“…Barish et al [13], describes a somewhat similar setup than the one proposed here. In their approach, a global address manager is used to keep track of tags.…”

“…If the tag is not present at the location the request is redirected to the global address server that returns the tag's present address or just redirects the request to the correct address. In contrast to the proposed solution by Barish et al [13], the approach described here does not include extra nodes in the network to construct network addresses but adds functionality to the RFID readers residing at the network edge.…”

From RFID tag ID to IPv6 address mapping mechanism

“…Some studies propose to provide the tags themselves with the IPv6 protocol stack, making them able to use IPv6 communication over the Internet whenever close to a reader [5]. However, it is proved that this proposition represent a great challenge because several changes are required to the design of existing tags more specifically providing tags with an alimentation source.…”

“…However, it is proved that this proposition represent a great challenge because several changes are required to the design of existing tags more specifically providing tags with an alimentation source. These changes make tags too expensive for integration into the Internet of Things since the price of the tags could easily exceed the value of the "things" themselves [5].…”

Security and Trust of Public Key Cryptography for HIP and HIP Multicast

“…Presently there is no better authorization of 'global trust' than preinstalled CA certificates in certificate databases of www browsers and email clients. However, also HI certification by an intra-domain trusted CA can create a trust relationship between two HIP network hosts from different network domains, when both domains belong to the same Identity Management Federation based on a framework like Microsoft CardSpace, OpenID, Liberty Alliance (LA), or Shibboleth (Barisch & Matos, 2009).…”