Enhancing user authentication in claim-based identity management

2010 International Symposium on Collaborative Technologies and Systems, CTS 2010

Volumn , Issue , 2010, Pages 75-83

  Alrodhan, Waleed A ^a   Mitchell, Chris J ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Claim based identity CardSpace usercentric authentication

Indexed keywords

CHALLENGE RESPONSE; CLAIM-BASED IDENTITY CARDSPACE USERCENTRIC AUTHENTICATION; IDENTITY MANAGEMENT; IDENTITY THEFT; PERSONALLY IDENTIFIABLE INFORMATION; PROOF OF CONCEPT; SECURITY POLICY; SECURITY TOKENS; SERVICE PROVIDER; USER AUTHENTICATION; USER-CENTRIC;

AUTHENTICATION;

EID: 77954503612     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CTS.2010.5478521     Document Type: Conference Paper

References (20)

1. V. Bertocci, G. Serack, and C. Baker. UNDERSTANDING WINDOWS CARDSPACE. Addison-Wesley, 2008.
2. K. Beznosov, D. J. Flinn, S. Kawamoto, and B. Hartman. "Introduction to Web services and their security". Information Security Technical Report, 10:2-14, 2005.
3. K. Cameron. "The laws of identity", May 2005. Microsoft Corporation.
4. K. Cameron and M. B. Jones. "Design rationale behind the identity metasystem architecture", February 2006. Microsoft Corporation.
5. D. W. Chadwick. "Federated identity management". In International School on Foundations of Security Analysis and Design (FOSAD08), volume 5705 of Lecture Notes in Computer Science, pages 96120. Springer-Verlag, 2008.
6. E. Christensen, F. Curbera, G. Meredith, and S.Weerawarana. "Web Services Description Language (WSDL) - version 1.1", March 2001. The World Wide Web Consortium (W3C).
7. F. Curbera, S. Parastatidis, and J. Schlimmer (editors). "Web services metadata exchange (WS-MetadataExchange) - version 1.1", August 2006. BEA Systems, Computer Associates, IBM, Microsoft, SAP AG, Sun Microsystems, and webMethods.
8. S. Gajek, J. Schwenk, and C. Xuan. "On the insecurity of Microsofts identity metasystem". Technical Report TR-HGI-2008-3003, Horst Görtz Institute for IT Security, Ruhr-Universitat Bochum, June 2008.
9. International Organization for Standardization, Geneve, Switzerland. "ISO/IEC FCD 24760, Information technology - Security techniques - A framework for identity management", July 2009.
10. M. B. Jones. "A guide to supporting InfoCard v1.0 within web applications and browsers", March 2006. Microsoft Corporation.
11. A. Jøsang and S. Pope. "User centric identity management". In Proceedings of Australian Computer Emergency Response Team Conference (AusCERT 2005), 2005.
12. Microsoft Corporation. "Microsofts vision for an identity metasystem", May 2005.
13. Microsoft Corporation. "A technical reference for InfoCard v1.0 in windows", August 2005.
14. Microsoft Corporation. "A Guide to Using the Identity Selector Interoperability Profile V1.5 within Web Applications and Browsers", July 2008.
15. Microsoft Corporation and Ping Identity Corporation. "A guide to integrating with InfoCard v1.0", August 2005.
16. N. Mitra and Y. Lafon (editors). "SOAP - version 1.2", April 2007. The World Wide Web Consortium (W3C).
17. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, and H. Granqvist (editors). "WS-SecurityPolicy - version 1.2", July 2007. OASIS Standard.
18. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, and H. Granqvist (editors). "WS-Trust - version 1.3", March 2007. OASIS Standard.
19. A. Nadalin, C. Kaler, R. Monzillo, and P. Hallam-Baker (editors). "Web services security: SOAP message security - version 1.1", February 2006. OASIS Standard Specification.
20. A. Nanda. "Identity selector interoperability profile v1.0", April 2007. Microsoft Corporation.