Universal identity management model based on anonymous credentials

Proceedings - 2010 IEEE 7th International Conference on Services Computing, SCC 2010

Volumn , Issue , 2010, Pages 305-312

  Zhang, Yang ^a   Chen, Jun Liang ^a  

^a BEIJING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

Author keywords

Identity management; Identity metasystem; Privacy concerns of service oriented solutions; Privilege delegation

Indexed keywords

ANONYMOUS CREDENTIAL; COMPOSITE SERVICES; IDENTITY INFORMATION; IDENTITY MANAGEMENT; METASYSTEM; PRIVACY CONCERNS OF SERVICE-ORIENTED SOLUTIONS; PRIVILEGE DELEGATION; USER-CENTRIC; USER-CENTRIC IDENTITY;

AUTHENTICATION; INFORMATION SERVICES; SECURITY OF DATA;

MANAGEMENT;

EID: 77957890452     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SCC.2010.46     Document Type: Conference Paper

References (33)

1. K. Cameron, Laws of identity. http://www.identityblog.com, 5/12/2005.
2. PRIME CONSORTIUM. Privacy and Identity Management for Europe (PRIME). http://www.prime-project.eu.
3. Identity-management. Liberty alliance project. http://www.projectliberty. org.
4. C. Kaler and A. Nadalin. WS-federation: Passive requestor profile, 2003. Available from: ftp://www6.software.ibm.com/software/developer/library/ws- fedpass.pdf.
5. A. Bhargav-Spantzel, J. Camenisch. User Centricity: A Taxonomy and Open Issues. In The Second ACM Workshop on Digital Identity Management - DIM 2006, pages 493-527, 2007. (Pubitemid 47182338)
6. D. Chaum. Security without identification: transaction systems to make big brother obsolete. Communications of the ACM, 28(10), pages 1030-1044, 1985.
7. M. Chase and A. Lysyanskaya. On signatures of knowledge. In Cynthia Dwork, editor, CRYPTO 2006, volume 4117 of LNCS, pages 78-96, 2006.
8. M. Belenkiy, J. Camenisch, M. Chase, M. Kohlweiss, A. Lysyanskaya, and H. Shacham. Delegatable Anonymous Credentials. http://eprint.iacr.org/2008/428.
9. IBM, Microsoft, Actional, BEA, Computer Associates, Layer 7, Oblix, Open Network, Ping Identity, Reactivity, and Verisign. Web Services Trust Language (WS-Trust). February 2005.
10. Microsoft organization. Microsoft's Vision for an Identity Metasystem. Microsoft Whitepaper, May 2005. http://msdn2.microsoft.com/en-us/library/ ms996422.aspx http://zoo.cs.yale.edu/classes/cs457/tsui-digital-identity- managemen t.doc.
11. D. Chappell. Introducing Windows CardSpace. Windows Vista Technical Articles, April 2006 http://msdn2.microsoft.com/en-us/library/aa480189.aspx.
12. CodeIdol.com. InfoCard Architecture and Security http://codeidol.com/ csharp/indigo/InfoCard/InfoCard-Architecture-and-Security/.
13. Novell corp. Bandit project http://www.bandit-project.org/index.php/ Welcome-to-Bandit.
14. L.N. Hoang, P. Laitinen, N. Asokan. Secure roaming with identity metasystem. Proceedings of the Symposium on Identity and Trust on the Internet, pp.36-47, March 2008.
15. N.H. Li, W.H. Winsborough, J.C. Mitchell. Distributed credential chain discovery in trust management: extended abstract. In ACM Conference on Computer and Communications Security (2001), pp. 156-165, 2001.
16. Marc Goodner, Maryann Hondo, Anthony Nadalin, Michael McIntosh, and Don Schmidt. Understanding WS-Federation. Microsoft and IBM, 2007 May.
17. Y. Zhang. An Efficient Anonymous Authentication Protocol with Pseudonym Revocability. 2009 Fifth International Joint Conference on INC, IMS and IDC, pp. 1929-1934, 2009.
18. Y. Zhang, J.L. Chen. A Delegation Solution for Universal Identity Management in SOA. IEEE Transaction on Services Computing, 3, 2010, 10.1109/TSC.2010.9 .
19. J. Camenisch, V. Shoup. Practical verifiable encryption and decryption of discrete logarithms. In Advances in Cryptology-RYPTO, pp. 126-144, 2003.
20. OASIS. Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0. OASIS Standard, March 2005.
21. Liberty Alliance Project. Liberty ID-FF Protocols and Schema Specification. Version 1.2, November 2003. http://www.projectliberty.org/specs.
22. Hidehito Gomi, Makoto Hatakeyama, Shigeru Hosono, Satoru Fujita. A Delegation Framework for Federated Identity Management. Proceedings of the 2005 workshop on Digital identity management, pp. 94-103, 2005.
23. M. Blaze, J. Feigenbaum, J. Lacy. Decentralized trust management. Tech. Rep. 96-17, 28, 1996.
24. M. Blaze, J. Feigenbaum, A.D. Keromytis. KeyNote: Trust management for public-key infrastructures (position paper). Lecture Notes in Computer Science 1550 (1999), pp. 59-63, 1999.
25. M. Ahsant, J. Basney, O. Mulmo. Grid Delegation Protocol. Proceedings of the Workshop on Grid Security Practice and Experience, July 2004.
26. D. Chaum and J.H. Evertse. A secure and privacy-protecting protocol for transmitting personal information between organizations. In Advances in Cryptology-CRYPTO'86, pp. 118-167, 1986.
27. I.B. Damgard. Payment systems and credential mechanisms with provable security against abuse by individuals. Advances in Cryptology-CRYPTO'88, pp. 328-335, 1988.
28. L,D, Chen. Access with pseudonyms. Lecture Notes in Computer Science, 1029: pages 232-243, 1995.
29. A. Lysyanskaya, R. Rivest, and A. Sahai. Pseudonym systems. In Selected Areas in Cryptography, 6th Annual International Workshop, SAC'99, pp. 184-199, 1999.
30. J. Camenisch and A. Lysyanskaya. Efficient non-transferable anonymous multi-show credential system with optional anonymity revocation. In Birgit Pfitzmann, editor, EUROCRYPT 2001, volume 2045 of LNCS, pp. 93-118. Springer Verlag, 2001.
31. J. Camenisch and A. Lysyanskaya. A signature scheme with efficient protocols. In SCN 2002, volume 2576 of LNCS, pp. 268-289, 2002.
32. J. Camenisch and A. Lysyanskaya. Signature schemes and anonymous credentials from bilinear maps. In CRYPTO 2004, volume 3152 of LNCS, pp. 56-72, 2004.
33. M. Belenkiy, M. Chase, M. Kohlweiss. Non-Interactive Anonymous Credentials. Theoretical Cryptography Conference (TCC) 2008. http://eprint.iacr.org/2007/384.