Sciweavers

FGCS
2010

A conceptual model for attribute aggregation

13 years 2 months ago
A conceptual model for attribute aggregation
This paper describes a conceptual model for attribute aggregation that allows a service provider (SP) to authorise a user’s access request based on attributes asserted by multiple identity providers (IdPs), when the user is known by different identities at each of the IdPs. The user only needs to authenticate to one of the IdPs and the SP is given an overall level of assurance (LoA) about the authenticity of the user and his/her attributes. The model employs a new component called a Linking Service (LS), which is a trusted third party under the control of the user, whose purpose is to link together the different IdP accounts that hold a user’s attributes, along with their respective LoAs. There are several possible interaction models for communications between the IdPs, the SP, LSs and the user, and each are described. The model is underpinned with a fully specified trust model, which also describes the implications when participants do not fully trust each other as required. Fina...
David W. Chadwick, George Inman, Nate Klingenstein
Added 25 Jan 2011
Updated 25 Jan 2011
Type Journal
Year 2010
Where FGCS
Authors David W. Chadwick, George Inman, Nate Klingenstein
Comments (0)