CardSpace-liberty integration for CardSpace users

  • Authors:
  • Haitham S. Al-Sinani;Waleed A. Alrodhan;Chris J. Mitchell

  • Affiliations:
  • University of London;University of London;University of London

  • Venue:
  • Proceedings of the 9th Symposium on Identity and Trust on the Internet
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Whilst the growing number of identity management systems have the potential to reduce the threat of identity attacks, major deployment problems remain because of the lack of interoperability between such systems. In this paper we propose a novel scheme to provide interoperability between two of the most widely discussed identity management systems, namely Microsoft CardSpace and Liberty. In this scheme, CardSpace users are able to obtain an assertion token from a Liberty-enabled identity provider that will satisfy the security requirements of a CardSpace-enabled relying party. We specify the operation of the integration scheme and also describe an implementation of a proof-of-concept prototype. Additionally, security and operational analyses are provided.