Sciweavers

ETRICS
2006

Policy-Based Integration of User and Provider-Sided Identity Management

13 years 9 months ago
Policy-Based Integration of User and Provider-Sided Identity Management
Abstract. Depending on whether the users or the providers are performing it, Identity Management (IM) traditionally has different meanings. For users, IM means to choose between one's own identities and roles, in order to make selected personal information available to providers under privacy aspects. For providers, IM typically consists of centralized identity data repositories and their use by the offered services. Methods and tools for both aspects of IM have developed almost orthogonally, failing to consider their interoperability and complementary purposes. We analyze the similarities between both IM aspects and demonstrate how both sides can benefit from the use of a common policy language for personal information release and service provisioning. We derive criteria for this common policy language, demonstrate XACML's suitability and discuss our prototype for the Shibboleth IM system.
Wolfgang Hommel
Added 22 Aug 2010
Updated 22 Aug 2010
Type Conference
Year 2006
Where ETRICS
Authors Wolfgang Hommel
Comments (0)