Identity federation and privacy: one step beyond

  • Authors:
  • Sébastien Canard;Eric Malville;Jacques Traoré

  • Affiliations:
  • Orange Labs R&D, Caen, France;Orange Labs R&D, Caen, France;Orange Labs R&D, Caen, France

  • Venue:
  • Proceedings of the 4th ACM workshop on Digital identity management
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Providing Single Sign-On (SSO) between SPs and enabling SPs to share user personal attributes are critical for both users to benefit from a seamless access to their services, and SPs to realize new business opportunities. Today, however, the users have several independent, partial identities spread over different SPs. Providing SSO and attribute sharing requires that links (federations) are established between (partial) identities. In Liberty and SAML, the links between identities are stored and managed at the network side by the IdPs (network-side identity federation). This model prevents the SPs from mass-correlating the partial identities they have, but the users must fully trust the IdPs. In this paper, we propose a complementary approach where the users have a full control of the links between the partial identities. This client-side identity federation approach relies on the introduction of a new cryptographic tool, called invariable partially blind signature scheme, that may be of independent interest.