NDLI: OCCASIO: An operable concept for confidential and secure identity outsourcing

Content Provider	IEEE Xplore Digital Library
Author	Kohler, J. Hartenstein, H.
Copyright Year	2013
Description	Author affiliation: Inst. of Telematics, Karlsruhe Inst. of Technol. (KIT), Karlsruhe, Germany (Kohler, J.; Hartenstein, H.)
Abstract	While federated identity management separates service provisioning from identity provisioning, the identity provider is usually operated at the home organization of the identities. We address the challenge of outsourcing the entire identity provider with its user database to an untrusted external provider in a secure and privacy-preserving way. With this type of outsourcing, the home organization is no longer required to operate high availability infrastructure for access management. Instead, the home organization only needs to frequently attest that the identity data in the outsourced database is still up to date, a task that is much less demanding than providing access decisions whenever a user wants to make use of a service. In this paper we present Occasio, a concept that permits secure outsourcing of identity and access management to untrusted external providers. Occasio builds on concepts of outsourcing databases and particularly on Merkle Hash Trees. We show that Occasio matches all security requirements for operation in an untrusted environment. Furthermore, we demonstrate that Occasio can be easily integrated into the SAML standard. We present results of a performance evaluation that shows that Occasio behaves well in terms of overhead. Finally, we show that with Occasio identity data of different home organizations can be `aggregated' without being linkable by someone other than the services that are granted to do so by the user.
Starting Page	235
Ending Page	243
File Size	250430
Page Count	9
File Format	PDF
ISBN	9781467352291
e-ISBN	9783901882500
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-05-27
Publisher Place	Belgium
Access Restriction	Subscribed
Rights Holder	IFIP
Subject Keyword	Protocols Outsourcing Public key Organizations Standards organizations Availability Authorization availability service outsourcing identity and access management cloud
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

ICEMAN: An architecture for secure federated inter-cloud identity management

Web-based authorization based on X.509 privilege management infrastructure

Identity and access management- a comprehensive study

A Multi-token Authorization Strategy for Secure Mobile Cloud Computing

An authorization model for a public key management service (2001)

User-centric trust based identity as a service for federated cloud environment

Service token for identity access management

An identity-based simple Authorization system on grid computing resources

On secure outsourcing of cryptographic computations to cloud

OCCASIO: An operable concept for confidential and secure identity outsourcing

Similar Documents

ICEMAN: An architecture for secure federated inter-cloud identity management

Web-based authorization based on X.509 privilege management infrastructure

Identity and access management- a comprehensive study

A Multi-token Authorization Strategy for Secure Mobile Cloud Computing

An authorization model for a public key management service (2001)

User-centric trust based identity as a service for federated cloud environment

Service token for identity access management

An identity-based simple Authorization system on grid computing resources

On secure outsourcing of cryptographic computations to cloud

OCCASIO: An operable concept for confidential and secure identity outsourcing