Enhancing consumer privacy in the Liberty Alliance identity Federation and Web Services Frameworks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4258 LNCS, Issue , 2006, Pages 59-77

  Alsaleh, Mansour ^a   Adams, Carlisle ^a  

^a UNIVERSITY OF OTTAWA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

CONSUMER PRIVACY; ELECTRONIC BUSINESS; FALSE DATA; IDENTITY FEDERATION; IDENTITY INFORMATION; IDENTITY MANAGEMENT SYSTEMS; INTERNET SERVICES; INTERNET USAGE; KEY OBJECTIVE; LIBERTY ALLIANCE; ONLINE PRIVACY; OPEN STANDARDS; PERSONAL INFORMATION; PRIVACY AND SECURITY; PRIVACY BREACHES;

ELECTRONIC COMMERCE; INTERNET; STANDARDIZATION; WEB SERVICES;

DATA PRIVACY;

EID: 70449570465     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11957454_4     Document Type: Conference Paper

References (26)

1. Aarts, R., Björksten, M., Deadman, S., Duserick, B., Karhuluoma, N., et al., "Liberty architecture framework for supporting Privacy Preference Expression Languages (PPELs)". Nov 2003, Version 1.0, Liberty Alliance Project. Available from: http://www.projectliberty.org/about/ whitepapers.php.
2. Ahn, G.-J. and Lam, J. "Managing privacy preferences for federated identity management". In Proceedings of the 2005 workshop on Digital identity management, Fairfax, VA, USA, November 2005. ACM Press.
3. Ahn, G.-J., Shin, D., and Hong, S.-P. "Information Assurance in Federated Identity Management: Experimentations and Issues". In Proceedings of the 5th International Conference on Web Information Systems Engineering: Web Information Systems - WISE 2004, Brisbane, Australia, November 2004. LNCS, Volume 3306, Jan 2004, Pages 78 - 89.
4. Bhargav-Spantzel, A., Squicciarini, A. C., and Bertino, E. "Establishing and protecting digital identity in federation systems". In Proceedings of the 2005 workshop on Digital identity management, Fairfax, VA, USA, November 2005. ACM Press.
5. Brown, K. "Security Briefs: Step-by-Step Guide to InfoCard". April 2006. MSDN Magazine, Microsoft. Available from: http://msdn.microsoft.com/ msdnmag/issues/06/05/SecurityBriefs/default.aspx [Accessed: April 25, 2006].
6. BusinessWeek online. "Business Week/Harris Poll: A Growing Threat". March, 2000. Available from: http://businessweek.com/2000/00-12/ b3673010.htm [Accessed: January 16, 2006].
7. Ellison, G. and Madsen, P., "Liberty ID-WSF Security Mechanisms", version 2.0-03, Liberty Alliance Project. Available from: http://www.projectliberty.org/resources/specifications.php.
8. Fox, S. "Trust and Privacy Online: Why Americans Want to Rewrite the Rules". August 2000. Pew Internet & American Life Project. Available from http://:www.pewinternet.org/pdfs/PIP-Trust-Privacy-Report.pdf [Accessed: February 17, 2006].
9. Gartner Group. 2003. Industry watchdog Gartner Group. Available from: http://www.gartner.com [Accessed: October 21, 2005].
10. Groβ, T. "Security analysis of the SAML Single Sign-on Browser/Artifact profile". In Proceedings of the 19th Annual Computer Security Applications Conference., Dec 2003. IEEE.
11. Hommel, W. "Using XACML for Privacy Control in SAML-Based Identity Federations". In Proceedings of the TC-11International Conference, CMS 2005, Salzburg, Austria, September 2005. Lecture Notes in Computer Science, Volume 3677, Sep 2005, Pages 160 - 169.
12. Johnston, S. J. "Pondering Passport: Do You Trust Microsoft With Your Data?" September, 2001. PCWorld.com. Available from: http://pcworld.about.com/news/Sep242001id63244.htm [Accessed: January 10, 2006].
13. Kellomäki, S. and Lockhart, R., "Liberty ID-SIS Personal Profile Service Specification". 2003, Version 1.1, Liberty Alliance Project. Available from: http://www.projectliberty.org/resources/specifications. php.
14. Landau, S., "Liberty ID-WSF Security & Privacy Overview". 2003, Version 1.0, Liberty Alliance Project. Available from: http://www.projectliberty.org/resources/specifications.php.
15. Liberty Alliance Project. Available from: http://www.projectliberty.org/ [Accessed: October 2005].
16. Liberty Alliance Project. "Liberty Alliance Whitepaper: Identity Theft Primer". December 2005. Available from: http://www.projectliberty. org/resources/id-Theft-Primer-Final.pdf [Accessed: January 2006].
17. Madsen, P. and Takahashi, Y. K. K. "Federated identity management for protecting users from ID theft". In Proceedings of the 2005 workshop on Digital identity management, Fairfax, VA, USA, November 2005. ACM Press.
18. OASIS Security Services (SAML) TC. "Security Assertion Markup Language (SAML)". OASIS Standards. Available from: http://www.oasis-open. org/committees/tc-home.php?wg-abbrev=security [Accessed: December 2005].
19. Pfitzmann, B. "Privacy in Enterprise Identity Federation - Policies for Liberty Single Signon -". In Proceedings of the 3rd Workshop on Privacy Enhancing Technologies (PET), Dresden, Germany, March 2003. Lecture Notes in Computer Science, Volume 2760, Dec 2003, Pages 189 - 204.
20. Pfitzmann, B. and Waidner, M. "Federated Identity-Management Protocols - Where User Authentication Protocols May Go". In Proceedings of the 11th Cambridge Workshop on Security Protocols, Cambridge, UK, April 2003. Lecture Notes in Computer Science, Volume 3364, Pages 153 - 174.
21. Pfitzmann, B. and Waidner, M. "Privacy in browser-based attribute exchange". In Proceedings of the 2002 ACM workshop on Privacy in the Electronic Society, Washington, DC, USA, November 2002. ACM Press.
22. SourceID. "Digital Identity Basics". Available from: http://www.sourceid.org/content/primer [Accessed: December 2005].
23. Taylor, K. and Murty, J. "Implementing role based access control for federated information systems on the web". In Proceedings of the Australasian information security workshop conference on ACSW frontiers 2003 - Volume 21, Adelaide, Australia, 2003. ACM Press.
24. Varney, C. and Hartson, H., "Privacy and Security Best Practices". November 2003, Version 2.0, Liberty Alliance Project. Available from: http://www.projectliberty.org/resources/specifications.php.
25. Varney, C. and Sheckler, V., "Deployment Guidelines for Policy Decision Makers". September 2005, Version 2.9, Liberty Alliance Project. Available from: http://www.projectliberty.org/about/whitepapers.php.
26. Wason, T., "Liberty ID-FF Architecture Overview". 2004, Version: 1.2-errata-v1.0, Liberty Alliance Project. Available from: http:// www.projectliberty.org/resources/specifications.php.