A conceptual approach to information security in financial account aggregation

Authors:
Manish Agrawal;Hemant Padmanabhan;Lokesh Pandey;H. R. Rao;Shambhu Upadhyaya
Affiliations:
University of South Florida, Tampa, FL;M&T Bank, Buffalo, NY;M&T Bank, Buffalo, NY;State University of New York, Buffalo, New York;State University of New York, Buffalo, New York
Venue:
ICEC '04 Proceedings of the 6th international conference on Electronic commerce
Year:
2004

Citing 1
Cited 2

Foreword Next Generation Enterprises—Virtual Organizations and Pervasive/Mobile Technologies

Information Systems Frontiers

Defining the security required for WAP based mobile ticket sales

Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services
Unifying private registry and web service access control

MIV'05 Proceedings of the 5th WSEAS international conference on Multimedia, internet & video technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

An important dimension of mobile computing is the ubiquitous and location-independent availability of data. Aggregation is the ability to electronically access and display personal account information from disparate sources through a single identity. The client financial data is assembled in an organized format providing meaningful summarization and analysis. The prevalent methods of aggregation pose issues in information security and assurance. Utilizing advances in Internet technology such as web services and SOAP coupled with the best of the present approaches to aggregation we can arrive at better solutions to securing the identity and data of aggregation customers. The paper puts forth conceptual solutions to address issues regarding security of user profile and identifying aggregators masquerading as users through processes such as screen scraping.