Federated identity-management protocols

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3364 LNCS, Issue , 2005, Pages 153-174

  Pfitzmann, Birgit ^a   Waidner, Michael ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

MICROSOFT PASSPORT; THE LIBERTY ALLIANCE'S PROPOSALS; WS-FEDERATION;

IDENTIFICATION (CONTROL SYSTEMS); NETWORK PROTOCOLS; SECURITY OF DATA; STANDARDIZATION;

ARTIFICIAL INTELLIGENCE;

EID: 33645654854     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11542322_20     Document Type: Conference Paper

References (23)

1. M. Abadi, R. Needham: Prudent Engineering Practice for Cryptographic Protocols; IEEE Transactions on Software Engineering 22/1 (1996) 6-15
2. R. Anderson, R. Needham: Robustness Principles for Public Key Protocols; Crypto 95, Springer-Verlag, Berlin 1995, 236-247
3. K. Bohrer, X. Liu, D. Kesdogan, E. Schonberg, M. Singh, S. Spraragen: Personal Information Management and Distribution; 4th Intern. Conf. on Electronic Commerce Research (ICECR-4), Dallas, 2001
4. D. Chaum: Security without Identification: Transaction Systems to make Big Brother Obsolete; Communications of the ACM 28/10 (1985) 1030-1044
5. J. Camenisch, E. Van Herreweghen: Design and Implementation of the Idemix Anonymous Credential System; 9th ACM Conference on Computer and Communications Security (CCS), 2002, 21-30
6. Thomas Groß Security Analysis of the SAML Single Sign-on Browser/Artifact Profile; 19th Annual Computer Security Applications Conference (ACSAC 2003), IEEE Computer Society Press, December 2003
7. IBM Consumer Wallet; White Paper, 1999 (first release 1997), http://www-3.ibm.com/software/webservers/commerce/payment/wallet.pdf
8. IBM: Enterprise Security Architecture using IBM Tivoli Security Solutions; April 2002, http://www.redbooks.ibm.com/abstracts/sg246014. html
9. D. P. Kormann, A. D. Rubin: Risks of the Passport Single Signon Protocol; Computer Networks 33 (2000) 51-58
10. Liberty Alliance Project: Liberty Phase 2 Final Specifications, November 2003, http://www.projectliberty.org/specs/lap-phase2-final.zip (v1.0 July 2002).
11. Microsoft Corporation: .NET Passport documentation, in particular Technical Overview, Sept. 2001, and SDK 2.1 Documentation (started 1999); http://www.passport.com and http://msdn.microsoft.com/downloads
12. Passlogix: v-Go Single Signon; White Paper, 2000 (first release 1999), http://www.passlogix.com/media/pdfs/usable_security.pdf
13. B. Pfitzmann, M. Waidner: BBAE - A General Protocol for Browser-based Attribute Exchange; IBM Research Report RZ 3455 (#93800) 09/09/02, http://www.zurich.ibm.com/security/publications/2002/
14. B. Pfitzmann, M. Waidner: Privacy in Browser-Based Attribute Exchange; ACM Workshop on Privacy in the Electronic Society (WPES) 2002, ACM Press 2003, 52-62
15. B. Pfitzmann, M. Waidner: Analysis of Liberty Single-Signon with Enabled Clients; IEEE Internet Computing 7(6) 2003, 38-44
16. Roboform: Free Web Form Filler and Password Manager; first release 1999, http://www.siber.com/roboform/.
17. Security Assertion Markup Language (SAML); OASIS Standard, Nov. 2002, http://www.oasis-open.org/committees/security/docs/
18. Shibboleth-Architecture Draft v05; May 2002 (v01 in 2001), http://middleware.internet2.edu/shibboleth/docs/ draft-internet2-shibboleth-arch-v05.pdf
19. M. Slemko: Microsoft Passport to Trouble; Rev. 1.18, Nov. 2001 http://alive.znep.com/marcs/passport/
20. BEA, IBM, Microsoft, RSA Security, VeriSign: WS-Federation: Passive Requestor Profile; Draft, Version 1.0, July 2003, http://www-106.ibm.com/developerworks/webservices/
21. HTTP Over TLS; Internet RFC 2818, 2000
22. XML-Signature Syntax and Processing; W3C Recommendation, Feb. 2002, http://www.w3.org/TR/xmldsig-core/
23. Zeroknowledge: Freedom Personal Firewall; first release 1999, http://www.freedom.net/products/firewall/index.html