An audit trail service to enhance privacy compliance in federated identity management

Proceedings of the 2007 Conference of the Center for Advanced Studies on Collaborative Research, CASCON '07

Volumn , Issue , 2007, Pages 175-187

  Peyton, Liam ^a   Doshi, Chintan ^a   Seguin, Pierre ^a  

^a UNIVERSITY OF OTTAWA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

AUDIT TRAILS; CONTROL ACCESS; DATA SERVICES; DATA SHARING; FEDERATED IDENTITY; LIBERTY ALLIANCE; PERSONAL INFORMATION; PRIVACY BREACHES; PRIVACY COMPLIANCE; PRIVACY CONCERNS; PRIVACY LEGISLATION; SCALABLE SOLUTION;

ACCESS CONTROL; DISTRIBUTED COMPUTER SYSTEMS; RESEARCH;

DATA PRIVACY;

EID: 72749120421     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1321211.1321230     Document Type: Conference Paper

References (27)

1. Aarts R., Madsen P., eds., Liberty ID-WSF Interaction Service Specification, Ver. 2.0, Liberty Alliance Project, New Jersey, 2006. http://www.projectliberty.org/liberty/content/download/885/6231/file/ liberty-idwsfinteraction-svc-v2.0.pdf, Accessed 2007/02.
2. Ackerman, M.S.; Cranor, L.F.; and Reagle, J. Privacy in e-commerce: Examining user scenarios and privacy preferences. In Proceedings of the ACM Conference on Electronic Commerce. New York: ACM Press, 1999, pp. 1-8.
3. M. Alsaleh, Enhancing Consumer Privacy in Identity Federation Architectures, Thesis, University of Ottawa, September 2006.
4. M.Alsaleh, C. Adams, "Enhancing Consumer Privacy in the Liberty Alliance Identity Federation and Web Services Frameworks". In Proceedings of the 6th Workshop on Privacy Enhancing Technologies (PET 2006), Cambridge, United Kingdom, June 2006.
5. Chen X., Zhang J., Wu D., Han R., (2005)'HIPPA's compliant Auditing System for Medical Imaging System', proceedings of the 2005 IEEE Engineering in Medicine and Biology 27th Annual Conference, Shanghai, China, Sept1-4.
6. J. Davies, N. Huismans, R. Slaney, S. Whiting, M. Webster and R. Berry, An Aspect Oriented Performance Analysis Environment, International Conference on Aspect Oriented Software Development, 2003. http://aosd.net/archive/2003/ program/davies.pdf Accessed 2007/02.
7. Ellison, G., ed., "Liberty ID-WSF Security Mechanisms"; version 1.0-17, Liberty Alliance, Project, July 2003, http://www.projectliberty.org/ resource-center/specifications/liberty-alliance-id-wsf-2-0-specifications Accessed 2007/02.
8. European Union Directive on Privacy and Electronic Communications. European Parliament, Brussels, Belgium, 2002. http://register.consilium.eu.int/ pdf/en/02/st03/03636en2.pdf, Accessed 2007/02.
9. Gates, C., Slonim, J., Owner Controlled Information, New Security Paradigms Workshop 2003 Ascona Switzerland, ACM 2004.
10. Health Insurance Portability and Accountability Act (HIPAA), United States Congress, United States, 1996. http://aspe.hhs.gov/admnsimp/pl104191.htm, Accessed February, 2007.
11. Hodges, J., Aarts R., Madsen P, Cantor, S., Eds., Liberty ID-WSF Authentication, Single Sign-On, and Identity Mapping Services Specification Ver2.0, Liberty Alliance Project, New Jersey, 2006. http://www.projectliberty. org/liberty/content/download/871/6189/file/liberty-idwsf-authnsvc-v2.0.pdf, Accessed 2007/02.
12. Hodges, J., Cahill, C., Eds., Liberty ID-WSF Discovery Service Specification. Ver2.0, Liberty Alliance Project, New Jersey, 2006. http://www.projectliberty.org/liberty/content/download/875/6201/file/ liberty-idwsf-discosvc-v2.0.pdf, Accessed 2007/02.
13. Kellomäki, S., Kainulainen, J., eds., Liberty ID-WSF Data Services Template ver.2.1, Liberty Alliance Project, New Jersey, 2006. http://www.projectliberty.org/liberty/content/download/879/6213/file/ liberty-idwsf-dstv2.1.pdf, Accessed 2007/02.
14. Kemp, Y., eds., "Liberty ID-WSF Web Services Framework Overview", Liberty Alliance Project, 2004, http://www.projectliberty.org/ liberty/resource-center/papers, Accessed 2007/02.
15. Koch, M., and Möslein, K.M., Identity Management for Ecommerce and Collaborative Applications, International Journal of Electronic Commerce/Spring 2005, Vol. 9, No. 3, pp. 11-29.M.E. Sharpe Inc., 2005.
16. Landau, S., eds., "Liberty ID-WSF Security & Privacy Overview"; version 1.0, Liberty Alliance Project, 2003, http://www.projectliberty.org/resource-center/specifications/ liberty-alliance-id-wsf-2-0-specifications. Accessed February 2007.
17. The Personal Information Protection and Electronic Documents Act (PIPEDA), Department of Justice, Canada, 2000. http://laws.justice.gc.ca/en/P-8. 6/text.html, Accessed 2007/02.
18. L.Peyton, M. Nozin, "Tracking Privacy Compliance in B2B Networks", Sixth International Conference on Electronic Commerce, Delft, The Netherlands, October, 2004.
19. L.Peyton, A. Rajwani, "A Generative Framework for Managed Services", Third International Conference on Generative Programming and Component Engineering, Vancouver, October, 2004.
20. D. Shin, G-J Ahn, P Shenoy. Ensuring Information Assurance in Federated Identity Management, IEEE Intl. Conference on Performance, Computing, and Communications, 2004, p. 821-826.
21. Wason, T., eds., "Liberty ID-FF Architecture Overview"; version 1.2Liberty Alliance Project, March 2003. http://www.projectliberty.org/liberty/ resource-center/papers, Accessed 2007/02.
22. Yip, F. Ray, P. Paramesh, N. (2006)'Enforcing Business Rules and Information Security Policies through Compliance Audits; XISSF - A Compliance Specification Mechanism', Business-Driven IT Management, BDIM'06, The First IEEE/IFIP International, ISBN: 1-4244-0176-3, pp. 81- 90.
23. B. Parr, R. Villars, "Digital Identities: The Coming Struggle for the Future of the net", IDC, 2001.
24. M. Casassa Mont, P. Bramhall, and J. Pato, "On Adaptive Identity Management: The Next Generation of Identity Management Technologies", Technical Report HPL-2003- 149, HP Labs, 2003.
25. M. Casassa Mont, P. Bramhall, M. Gittler, J. Pato, O. Rees, "Identity Management: a key e-business enabler", PL-2002- 164, SSGRR2002s, L'Aquila, Italy, 2002.
26. Federation of Identities in a Web Services World: whitepaper by IBM and Microsoft, http://www-128.ibm.com/developerworks/webservices/library/ specification/ws-fedworld/.
27. S Cantor et al, Oasis Security Services: "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2. 0".