Federated identity management for protecting users from ID theft

Authors:
Paul Madsen;Yuzo Koga;Kenji Takahashi
Affiliations:
NTT Advanced Technology, Palo Alto, CA;NTT Information Sharing Platform Laboratories, Tokyo, Japan;NTT Information Sharing Platform Laboratories, Tokyo, Japan
Venue:
Proceedings of the 2005 workshop on Digital identity management
Year:
2005

Citing 3
Cited 6

Risks of the passport single signon protocol

Proceedings of the 9th international World Wide Web conference on Computer networks : the international journal of computer and telecommunications netowrking
Security Analysis of the SAML Single Sign-on Browser/Artifact Profile

ACSAC '03 Proceedings of the 19th Annual Computer Security Applications Conference
Proving a WS-federation passive requestor profile with a browser model

Proceedings of the 2005 workshop on Secure web services

Commitment issues in delegation process

AISC '08 Proceedings of the sixth Australasian conference on Information security - Volume 81
An exprimental investigation of the usability of transaction authorization in online bank security systems

AISC '08 Proceedings of the sixth Australasian conference on Information security - Volume 81
Notarized federated ID management and authentication

Journal of Computer Security - 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec'06)
Interoperability of E-Government Information Systems: Issues of Identification and Data Sharing

Journal of Management Information Systems
Notarized federated identity management for web services

DBSEC'06 Proceedings of the 20th IFIP WG 11.3 working conference on Data and Applications Security
Enhancing consumer privacy in the liberty alliance identity federation and web services frameworks

PET'06 Proceedings of the 6th international conference on Privacy Enhancing Technologies

Quantified Score

Hi-index	0.02

Visualization

Abstract

Federated identity management is sometimes criticized as exacerbating the problem of online identity theft, based as it is on the idea of connecting together previously separate islands of identity information. This paper explores this conjecture, and argues that, while such linkages do undeniably increase the potential scope of a successful theft of identity information, this risk is more than offset by the much greater value federated identity, in combination with strong authentication, offers in preventing such theft in the first place.