An authentication trust metric for federated identity management systems

Authors:
Hidehito Gomi
Affiliations:
Yahoo! Japan Research, Tokyo, Japan
Venue:
STM'10 Proceedings of the 6th international conference on Security and trust management
Year:
2010

Citing 9
Cited 1

A calculus for access control in distributed systems

ACM Transactions on Programming Languages and Systems (TOPLAS)
Authentication metric analysis and design

ACM Transactions on Information and System Security (TISSEC)
Valuation of Trust in Open Networks

ESORICS '94 Proceedings of the Third European Symposium on Research in Computer Security
A survey of trust and reputation systems for online service provision

Decision Support Systems
User centricity: A taxonomy and open issues

Journal of Computer Security - The Second ACM Workshop on Digital Identity Management - DIM 2006
A Model for Trust Metrics Analysis

TrustBus '08 Proceedings of the 5th international conference on Trust, Privacy and Security in Digital Business
Using quantified trust levels to describe authentication requirements in federated identity management

Proceedings of the 2008 ACM workshop on Secure web services
A calculus of trust and its application to PKI and identity management

Proceedings of the 8th Symposium on Identity and Trust on the Internet
Towards dynamic trust establishment for identity federation

Proceedings of the 2009 Euro American Conference on Telematics and Information Systems: New Opportunities to increase Digital Citizenship

An extended attribute based access control model with trust and privacy: Application to a collaborative crisis management system

Future Generation Computer Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

A formalisation of authentication trust is proposed for federated identity management systems. Identity federation facilitates user interaction with Web services that control access, but it is more difficult for a service provider to evaluate the assurance of a user's identity if the creation and propagation of user authentication assertions involve different authentication authorities and mediators. On the basis of this formal representation, an aggregated trust value is calculated for evaluating the trustworthiness of a user's identity from the user's authentication assertions propagated through multiple entities.