NDLI: User-centric identity as a service-architecture for eIDs with selective attribute disclosure

Please wait, while we are loading the content...

A bodyguard of lies: the use of honey objects in information security

Hardware-enhanced distributed access enforcement for role-based access control

Anomaly detection and visualization in generative RBAC models

Towards more usable information flow policies for contemporary operating systems

Game theoretic analysis of multiparty access control in online social networks

What are the most important challenges for access control in new computing domains, such as mobile, cloud and cyber-physical systems?

Limiting access to unintentionally leaked sensitive documents using malware signatures

Towards fine grained RDF access control

Re-thinking networked privacy, security, identity and access control in our surveillance states

Path conditions and principal matching: a new approach to access control

An access control concept for novel automotive HMI systems

Reduction of access control decisions

Attribute based access control for APIs in spring security

Scalable and precise automated analysis of administrative temporal role-based access control

Optimized and controlled provisioning of encrypted outsourced data

Redaction based RDF access control language

An actor-based, application-aware access control evaluation framework

Monitor placement for large-scale systems

Sorting out role based access control

Comprehensive integrity protection for desktop linux

Access control models for geo-social computing systems

User-centric identity as a service-architecture for eIDs with selective attribute disclosure

A system for risk awareness during role mining

Policy models to protect resource retrieval

User-centric identity as a service-architecture for eIDs with selective attribute disclosure

Content Provider	ACM Digital Library
Author	Stranacher, Klaus Zwattendorfer, Bernd Slamanig, Daniel
Abstract	Unique identification and secure authentication of users are essential processes in numerous security-critical areas such as e-Government, e-Banking, or e-Business. Therefore, many countries (particularly in Europe) have implemented national eID solutions within the past years. Such implementations are typically based on smart cards holding some certified collection of citizen attributes and hence follow a client-side and user-centric approach. However, most of the implementations only support all-or-nothing disclosure of citizen attributes and thus do not allow privacy-friendly selective disclosure of attributes. Consequently, the complete identity of the citizen (all attributes) are always revealed to identity providers and/or service providers, respectively. In this paper, we propose a novel user-centric identification and authentication model for eIDs, which supports selective attribute disclosure but only requires minimal changes in the existing eID architecture. In addition, our approach allows service providers to keep their infrastructure nearly untouched. Latter is often an inhibitor for the use of privacy-preserving cryptography like anonymous credentials in such architectures. Furthermore, our model can easily be deployed in the public cloud as we do not require full trust in identity providers. This fully features the Identity as a Service-paradigm while at the same time preserves citizens' privacy. We demonstrate the applicability of our model by adopting to the Austrian eID system to our approach.
Starting Page	153
Ending Page	164
Page Count	12
File Format	PDF
ISBN	9781450329392
DOI	10.1145/2613087.2613093
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-06-25
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Austrian eid Cloud computing Privacy Public cloud Authentication Citizen card Selective attribute disclosure Identity management
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in