NDLI: Enhancing user authentication in claim-based identity management

Content Provider	IEEE Xplore Digital Library
Author	Alrodhan, W.A. Mitchell, C.J.
Copyright Year	2010
Description	Author affiliation: Information Security Grou, Royal Holloway, University of London (Alrodhan, W.A.; Mitchell, C.J.)
Abstract	In claim-based identity management (CBIM) systems, users identify themselves using security tokens that contain personally identifiable information, and that are signed by an identity provider. However, a malicious identity provider could readily impersonate any user by generating appropriate tokens. The growing number of identity theft techniques raises the risk of service providers being deceived by untrustworthy identity providers. We show how this vulnerability can be mitigated by adding an authentication layer, between the user and the service provider, to a CBIM system. We propose two possible implementations of this layer. The first approach requires a user to perform an additional step before the service provider completes the authentication process. That is, the user must present to the service provider certain information sent to the user by the service provider during the most recent successful use of the scheme. A proof-of-concept implementation of this scheme has been produced. The second approach involves a challenge-response exchange between the user and the service provider. This requires a minor modification to the service provider XML-based security policy declaration message.
Starting Page	75
Ending Page	83
File Size	1099186
Page Count	9
File Format	PDF
ISBN	9781424466191
e-ISBN	9781424466221
DOI	10.1109/CTS.2010.5478521
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-05-17
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authorization Privacy Authentication Information security Collaboration Prototypes Control systems Claim-based Identity CardSpace User-centric Authentication Protection Environmental management Identity management systems
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

User centric authentication for web applications

Privacy-Enhanced User-Centric Identity Management

Usability Enhanced Privacy Protection System Based on Users' Responses

A Privacy Enabled Service Authorization Based on a User-centric Virtual Identity Management System

User control enhanced digital identity interchange framework

Enhancing privacy in identity management systems

A Novel Authentication Protocol for Sensitive Information Privacy Protection Using Dynamic Key Based Group Key Management

Multi-domain Trust Management in variable-threat environments - a user-centric model

UCEN: User Centric Enterprise Network

Enhancing user authentication in claim-based identity management

Similar Documents

User centric authentication for web applications

Privacy-Enhanced User-Centric Identity Management

Usability Enhanced Privacy Protection System Based on Users' Responses

A Privacy Enabled Service Authorization Based on a User-centric Virtual Identity Management System

User control enhanced digital identity interchange framework

Enhancing privacy in identity management systems

A Novel Authentication Protocol for Sensitive Information Privacy Protection Using Dynamic Key Based Group Key Management

Multi-domain Trust Management in variable-threat environments - a user-centric model

UCEN: User Centric Enterprise Network

Enhancing user authentication in claim-based identity management