Establishing and protecting digital identity in federation systems

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2005, Pages 11-19

  Bhargav Spantzel, Abhilasha ^a   Squicciarini, Anna C ^b   Bertino, Elisa ^a  

^a PURDUE UNIVERSITY   (United States)

^b UNIVERSITY OF MILAN   (Italy)

Author keywords

Federation; Identity Management; Identity theft; Single sign on; Zero knowledge proof

Indexed keywords

COMPLEXITY RESULTS; CRYPTOGRAPHIC TECHNIQUES; DIGITAL IDENTITY; DISTRIBUTED HASH TABLE; FEDERATED IDENTITY; IDENTITY MANAGEMENT; IDENTITY THEFT; INSIDER THREAT; NOVEL SOLUTIONS; OPEN PROBLEMS; PRIVACY PRESERVING; SECURITY AND PRIVACY; SERVICE PROVIDER; SINGLE SIGN ON; USER IDENTITY; ZERO KNOWLEDGE PROOF;

CRIME; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; KNOWLEDGE BASED SYSTEMS; SECURITY OF DATA;

CRYPTOGRAPHY;

EID: 58349114203     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1102486.1102489     Document Type: Conference Paper

References (23)

1. M. Abadi and R. Needham. Prudent engineering practice for cryptographic protocols. IEEE Trans. Softw. Eng., 22(1):6-15, 1996.
2. H. Abelson and L. Lessig. Digital identity in cyberspace. In White Paper Submitted for 6.805/Law of Cyberspace: Social Protocols, 1998.
3. AES. http://csrc.nist.gov/cryptotoolkit/aes/.
4. M. Bellare and P. Rogaway. Random oracles are practical: A paradigm for designing efficient protocols. In ACM Conference on Computer and Communications Security, pages 62-73, 1993.
5. E. Bertino, E. Ferrari, and A. C. Squicciarini. Trust-Χ: A Peer-to-Peer Framework for Trust Establishment. In IEEE Transactions on Knowledge and Data Engineering, pages 827-842. IEEE, July 2004.
6. X. Chen, F. Zhang, and K. Kim. A new id-based group signature scheme from bilinear pairings, 2003.
7. W. Duserick and F. Investments. Whitepaper on liberty protocol and identity theft. In Liberty Alliance Project, 2004.
8. U. Fiege, A. Fiat, and A. Shamir. Zero knowledge proofs of identity. In STOC '87: Proceedings of the nineteenth annual ACM conference on Theory of computing, pages 210-217, New York, NY, USA, 1987. ACM Press.
9. Identity-Management. Liberty alliance project. http://www.projectliberty. org.
10. Internet2. Shibboleth. http://shibboleth.internet2.edu.
11. K. Klingestein. Emergence of identity service providers, 2002.
12. I. T. Management. http://www.identitytheftmanagement.com/.
13. G. S. Manku. Balanced binary trees for id management and load balance in distributed hash tables. In PODC '04: Proceedings of the twenty-third annual ACM symposium on Principles of distributed computing, pages 197-205, New York, NY, USA, 2004. ACM Press.
14. G. S. Manku. Dipsea: a modular distributed hash table. PhD thesis, 2004. Adviser-Rajeev Motwani.
15. A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone. Handbook of applied cryptography, 2001.
16. R. L. Nightingale. http://www.rsasecurity.com/rsalabs/node.asp?id=2424.
17. E. Norlin and A. Durand. Whitepaper on towards federated identity management. In Ping Identity Corporation, 2002.
18. N. R. C. of the National Academies. Who Goes There? Authentication Through the Lens of Privacy. The National Academies Press, Washington, D.C., 2003.
19. C. P. Schnorr. Efficient identification and signatures for smart cards. In CRYPTO '89: Proceedings on Advances in cryptology, pages 239-252, New York, NY, USA, 1989. Springer-Verlag New York, Inc.
20. R. SEMANK. Internet single sign-on systems.
21. A. B. Spantzel, A. C. Squicciarini, and E. Bertino. Integrating federated digital identity management and trust negotiation. In review IEEE Security and Privacy Magazine, 2005.
22. A. Whitten and J. D. Tygar. Why Johnny can't encrypt: A usability evaluation of PGP 5.0. In 8th USENIX Security Symposium, 1999.
23. D. Woodruff and J. Staddon. Private inference control. In CCS '04: Proceedings of the 11th ACM conference on Computer and communications security, pages 188-197, New York, NY, USA, 2004. ACM Press. 19.