An audit trail service to enhance privacy compliance in federated identity management

Authors:
Liam Peyton;Chintan Doshi;Pierre Seguin
Affiliations:
University of Ottawa;University of Ottawa;University of Ottawa
Venue:
CASCON '07 Proceedings of the 2007 conference of the center for advanced studies on Collaborative research
Year:
2007

Citing 5
Cited 1

Privacy in e-commerce: examining user scenarios and privacy preferences

Proceedings of the 1st ACM conference on Electronic commerce
Owner-controlled information

Proceedings of the 2003 workshop on New security paradigms
Tracking privacy compliance in B2B networks

ICEC '04 Proceedings of the 6th international conference on Electronic commerce
Identities Management for E-Commerce and Collaboration Applications

International Journal of Electronic Commerce
Enhancing consumer privacy in the liberty alliance identity federation and web services frameworks

PET'06 Proceedings of the 6th international conference on Privacy Enhancing Technologies

The IBM services connection

IBM Journal of Research and Development

Quantified Score

Hi-index	0.00

Visualization

Abstract

Federated identity management systems, such as the Liberty Alliance framework, are intended to protect identity and control access to personal information. An audit trail service has been proposed as an addition to the framework to address potential privacy breaches. A simple scenario is used to analyze what should be logged to an audit trail and how it should be logged in order to address privacy concerns and comply with privacy legislation. The implementation of an audit trail service conforming to the Liberty Alliance data service template is described. Our research to date has achieved results which show promise in terms of having a scalable solution that conforms to Liberty Alliance specifications and protects the user's identity while providing a consolidated view of the data sharing activities associated with their personal information.