Safeguarding digital identity: the SPICI (Sharing Policy, Identity, and Control Information) approach to negotiating identity federation and sharing agreements

  • Authors:
  • Deborah Bodeau

  • Affiliations:
  • The MITRE Corporation, Bedford, MA

  • Venue:
  • Proceedings of the 8th Symposium on Identity and Trust on the Internet
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

To perform key business functions, organizations in critical infrastructure sectors such as healthcare or finance increasingly need to share identifying and authorization-related information. Such information sharing requires negotiation about identity safeguarding policies and capabilities, as provided by processes, technologies, tools, and models. That negotiation must address the concerns not only of the organizations sharing the information, but also of the individuals whose identity-related information is shared. SPICI (Sharing Policy, Identity, and Control Information) provides a descriptive and analytic framework to structure and support such negotiations, with an emphasis on assurance.