Abstract
As Internet is a prime vehicle for business and personal interactions, more and more organizations provide their users with personalized online services. Identity Management is, therefore, a key component for these organizations to manage users’ accounts (i.e. identities) and secure access to their personal services and information. Today, however, users’personal information and authentication are confined to organizations’ boundaries. This brings to a situation where the users have multiple identities on the Internet preventing both users and organizations to benefit from registrations and authentications already done at other organizations. Identity federation becomes, therefore, a key component of identity management enabling authentications and personal information to pass through organizations’boundaries in a privacy-friendly way. This article focuses on Single Sign-On and attribute sharing, two of the main functions Identity Management systems provide. It gives an overview of the main solutions available today.
Résumé
Internet étant un support fondamental pour les interactions personnelles et commerciales, de plus en plus d’organisations proposent des services en ligne personnalisés à leurs utilisateurs. La gestion d’identité est donc un composant clé pour ces organisations pour gérer les comptes (ou identités) des utilisateurs et sécuriser l’accès à leurs informations et services personnels. Aujourd’hui, toutefois, Vauthentication et les informations personnelles des utilisateurs sont confinées aux frontières des organisations et ni les utilisateurs, ni les organisations ne peuvent bénéficier des enregistrements et des authentications déjà réalisés auprès d’autres organisations. La fédération devient donc un composant clé de la gestion d’identité en permettant aux organisations de partager authentifications et informations personnelles des utilisateurs tout en préservant leur vie privée. Cet article se focalise sur l’identification unique et le partage d’attributs, deux fonctions importantes des systèmes de gestion d’identité. Il donne un aperçu des principales solutions disponibles aujourd’hui.
This is a preview of subscription content, log in via an institution to check access.
Similar content being viewed by others
References
Berners-Lee (T.),Fielding (R.),Frystyk Nielsen (H.),Rfc1945, “Hypertext Transfer Protocol —Http/1.0”,Internet Engineering Task Force, May 1996.
Camp (L. J.),Osorio (C), “Privacy-Enhancing Technologies for Internet Commerce”, Trust in the Network Economy.Springer-Verlag, 2003.
Cantor (S.),Kemp (J.), eds., “LibertyId-ff Bindings and Profiles Specification”, Version 1.2,Liberty Alliance Project, 12 November 2003.
Claub (S.), Kohntopp (M.), “Identity Management and Its Support of Multilateral Security”,Computer Networks,37, 2001, pp. 205–219.
Dierks (T.),Rescorla (E.),Rfc 2246. “TheTls Protocol — Version 1.1”,Internet Engineering Task Force, December 2004.
Fielding (R.),Gettys (J.),Mogul (J.),Frystyk Nielsen (H.),Berners-Lee (T.),Rfc2068, “Hypertext Transfer Protocol —Http/1.1.”.Internet Engineering Task Force, January 1997.
Franks (J.),Hallam-Baker (P.),Hostetler (J.),Leach (P.),Luotonen (A.),Sink (E.),Stewart (L.),Rfc2069. “An Extension toHttp: Digest Access Authentication”,Internet Engineering Task Force, January 1997.
Freier (A. O.),Karlton (P.),Kocher (P. C), “TheSsl Protocol — Version 3.0.”,Internet Draft, March 1996.
Herzberg (A.),Mihaeli (J.),Mass (Y.),Naor (D.),Ravid (Y.) “Access Control Meets Public Key Infrastructure, Or: Assigning Roles to Strangers”, Inieee Symposium on Security and Privacy, Oakland,Ca, May 2000.
Ibm Corporation and Microsoft Corporation, “Security in a Web Services World: A Proposed Architecture and Roadmap”, A joint security whitepaper fromIbm Corporation and Microsoft Corporation, 7 April 2002.
Johnson (W.),Mudumbai (S.),Thompson (M.), “Authorization and Attribute Certificates for Widely Distributed Access Control”, InIeee International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, 1998.
Hickman (K.), “TheSsl Protocol”, Netscape Corp., February 1995.
Kristol (D.),Montulli (L.),Rfc2965. “Http State Management Mechanism”,Internet Engineering Task Force, October 2000.
Madsen (P.), “Liberty Alliance &Ws-Federation: A Comparative Overview”,Liberty Alliance Project, White Paper, 14 October 2003.
Maler (E.),Mishra (P.),Philpott (R.), eds., “Assertions and Protocol for theOasis Security Assertion Markup Language (Saml)”,Oasis Standard, 2 September 2003.
Microsoft Corporation, “Microsoft .Net Passport — Technical Overview”, October 2001.
Pashalidis (A.), Mitchell (C), “A taxonomy of single sign-on systems”, InSafavi-Naini (R.) andSeberry (J.), eds, Information Security and Privacy, 8th Australasian Conference,Acisp 2003, Wollongong, Australia, July 9–11, 2003, Proceedings,2727, Lecture Notes in Computer Science, pages 249–264. Springer-Verlag, Berlin, July 2003.
Scavo (T.),Cantor (S.),Dors (N.), “Shibboleth Architecture — Technical Overview”, Working Draft 02, June 2005.
Tourzan (J.), Koga (Y), eds., “LibertyId-wsf Web Services Framework Overview”,Liberty Alliance Project.
Varney (C),Cole (P.),Duserick (W),Lesser (J.),Podorowsky (G.),Sibieta (P.),Thornby (C), “Privacy and Security Best Practices — Version 2.0”,Liberty Alliance Project, White Paper, November 2003.
Wason (T.),Cantor (S.),Hodges (J.),Kemp (J.),Thompson (P.), “LibertyId-ff Architecture Overview — Version 1.2”,Liberty Alliance Project, November 2003.
Yu (T.),Winslett (M.),Seamons (K. E.), “Automated Trust Negotiation over the Internet”,6th World Multiconference on Systemics, Cybernetics and Informatics, Orlando, July 2002.
Author information
Authors and Affiliations
Rights and permissions
About this article
Cite this article
Malville, E., Crom, JM. & Gourmelen, G. A survey on identity federation solutions. Ann. Télécommun. 61, 379–398 (2006). https://doi.org/10.1007/BF03219913
Received:
Accepted:
Issue Date:
DOI: https://doi.org/10.1007/BF03219913
Key words
- Internet
- Authentication
- Identification
- Privacy protection
- Internet service provider
- System architecture
- Standardization
- Identity management