Privacy policies compliance across digital identity management systems

  • Authors:
  • Anna C. Squicciarini;Alexei Czeskis;Abhilasha Bhargav-Spantzel

  • Affiliations:
  • The Pennsylvania State University, University Park, PA;University of Washington, Seattle, WA;Intel Corporation, Santa Clara, CA

  • Venue:
  • SPRINGL '08 Proceedings of the SIGSPATIAL ACM GIS 2008 International Workshop on Security and Privacy in GIS and LBS
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

An emerging approach for protecting identities of individuals, while at the same time enhancing user convenience, is represented by federated identity management systems. In this paper we develop an approach to support privacy controlled sharing of identity attributes in federated environments. We present a wide range of strategies that enable users to trace their personal information across the federation and verify whether it has been managed according to their privacy preferences. Users can employ one or more of these strategies according to their goals and priorities. Additionally, we analyze the challenging issue of data, privacy policy, and preference updates in a federated system. Our algorithm allows users and federated service providers to control whether new versions of data and users' privacy references have been used, and detect possible inconsistencies.