User-Centric Identity Management in Heterogeneous Federations

Efficient identity management system has become one of the fundamental requirements for ensuring safe, secure, and transparent use of identifiable information and attributes. FIdM allows users to distribute their identity information across security domains which increase the portability of their digital identities. However, it also raises new architectural challenges and significant security and privacy issues that need to be mitigated. In this paper, we presented the limitations and risks in Federated Identity Management system and discuss the results and proposed solutions.

show abstract

“…On the user side, the management of the identity is getting more complicated if the user uses multiple federations. [45]…”

Section: Complexity For the Usermentioning

confidence: 99%

Federated Identity Management (FIdM) Systems Limitation and Solutions

Aldosary¹,

Alqahtani²

2021

Computer Science &Amp; Information Technology (CS &Amp; IT)

View full text Add to dashboard Cite

show abstract

“…In such a situation the 'minimal disclosure' of information principle can be satisfied in that only required data needed to access a service have to be transmitted to a business partner [8]. Further, a claims based system can facilitate fine-grained authorisation [23]. Also Satchell et al [24] highlight that FIdM facilitates the assignment of access rights and privileges, and Sharma et al [27] add that it facilitates possibilities for detailed audit trails.…”

Section: Benefits From a Business Perspectivementioning

confidence: 99%

Benefits of Federated Identity Management - A Survey from an Integrated Operations Viewpoint

Jensen¹

2011

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Federated Identity Management is considered a promising approach to facilitate secure resource sharing between collaborating partners. A structured survey has been carried out in order to document the benefits of adopting such systems from a user and business perspective, and also to get an indication on how Integrated Operations in the oil and gas industry can benefit from identity federations. This has resulted in a set of benefit categories grouping existing claims from researchers. The literature indicates that adoption of Federated Identity Management in Integrated Operation seems like a good idea, however, there are several challenges that need to be solved.

show abstract

“…We distinguish four models, while each model implements a specific identity management approach. As described in [6] and [7], an identity management model can be based on an domain-based approach or on an open environment approaches.…”

Section: Identity Managementmentioning

confidence: 99%

“…Rieger [6] provides approaches for the realization of user-centric and federated Identity Management. However, an automated selection of the best fitting Identity Management Model for an application is not defined.…”

Section: Related Workmentioning

confidence: 99%

Automated Security Service Orchestration for the Identity Management in Web Service Based Systems

Warschofsky

Menzel

Meinel

2011

2011 IEEE International Conference on Web Services

View full text Add to dashboard Cite

Abstract-Today, there is a huge amount of security services that can be used to implement different security requirements in Web Service based systems. For example, identity management services are required for authentication and authorization whereas message logging services are necessary to achieve nonrepudiation. However, the deployment and configuration of these security services usually requires expert knowledge about the systems and expert knowledge about security requirements and implementations which a person can only learn by experience. Furthermore, today's Web Service based systems become increasingly complex. Thus, implementing security requirements is a complex and error prone task, even for experts. For this paper, we analysed several service-based implementations for identity management and their differences in the service orchestration. We present an approach to derive the needed security services, their configuration, and their connections to the functional services, based on defined security requirements for a Web Service based system. Therefore, we evaluate the UML use case model of the system and apply service security pattern derived during the analysis of the identity management implementations.

show abstract

User-Centric Identity Management in Heterogeneous Federations

Cited by 14 publications

References 5 publications

Federated Identity Management (FIdM) Systems Limitation and Solutions

Federated Identity Management (FIdM) Systems Limitation and Solutions

Benefits of Federated Identity Management - A Survey from an Integrated Operations Viewpoint

Automated Security Service Orchestration for the Identity Management in Web Service Based Systems

Contact Info

Product

Resources

About