To Federate or Not To Federate: A Reputation-Based Mechanism to Dynamize Cooperation in Identity Management

  • Authors:
  • Patricia Arias Cabarcos;Florina Almenárez;Félix Gómez Mármol;Andrés Marín

  • Affiliations:
  • Universidad Carlos III de Madrid, Leganés, Madrid, Spain 28911;Universidad Carlos III de Madrid, Leganés, Madrid, Spain 28911;NEC Laboratories Europe, Heidelberg, Germany 69115;Universidad Carlos III de Madrid, Leganés, Madrid, Spain 28911

  • Venue:
  • Wireless Personal Communications: An International Journal
  • Year:
  • 2014

Quantified Score

Hi-index 0.00

Visualization

Abstract

Identity Management systems cannot be centralized anymore. Nowadays, users have multiple accounts, profiles and personal data distributed throughout the web and hosted by different providers. However, the online world is currently divided into identity silos forcing users to deal with repetitive authentication and registration processes and hindering a faster development of large scale e-business. Federation has been proposed as a technology to bridge different trust domains, allowing user identity information to be shared in order to improve usability. But further research is required to shift from the current static model, where manual bilateral agreements must be pre-configured to enable cooperation between unknown parties, to a more dynamic one, where trust relationships are established on demand in a fully automated fashion. This paper presents IdMRep, the first completely decentralized reputation-based mechanism which makes dynamic federation a reality. Initial experiments demonstrate its accuracy as well as an assumable overhead in scenarios with and without malicious nodes.