Providing Secured Access Delegation in Identity Management Systems

• Type: Article in International Conference Proceedings Book
• Date: 2020

Authors

Shehu, AS (Author) Other; Pinto, A (Author) Other; Manuel E Correia (Author) FCUP

Conference proceedings International

Title: Proceedings of the 17th International Joint Conference on e-Business and Telecommunications, ICETE 2020 - Volume 2: SECRYPT, Lieusaint, Paris, France, July 8-10, 2020.

Pages: 638-644

Indexing

ISI Web of Knowledge - 0 Citations

Scopus - 1 Citation

Scientific classification

FOS: Natural sciences > Computer and information sciences

CORDIS: Technological sciences > Engineering > Computer engineering

Other information

Authenticus ID: P-00S-GJM

DOI: 10.5220/0009892206380644

Abstract (EN): The evolutionary growth of information technology has enabled us with platforms that eases access to a wide range of electronic services. Typically, access to these services requires users to authenticate their identity, which involves the release, dissemination and processing of personal data by third parties such as service and identity providers. The involvement of these and other entities in managing and processing personal identifiable data has continued to raise concerns on privacy of personal information. Identity management systems (IdMs) emerged as a promising solution to address major access control and privacy issues, however most research works are focused on securing service providers (SPs) and the services provided, with little emphases on users privacy. In order to optimise users privacy and ensure that personal information are used only for intended purposes, there is need for authorisation systems that controls who may access what and under what conditions. However, for adoption data owners perspective must not be neglected. To address these issues, this paper introduces the concept of IdM and access control framework which operates with RESTful based services. The proposal provides a new level of abstraction and logic in access management, while giving data owner a decisive control over access to personal data using smartphone. The framework utilises Attribute based access control (ABAC) method to authenticate and authorise users, Open ID Connect (OIDC) protocol for data owner authorisation and Public-key cryptography to achieve perfect forward secrecy communication. The solution enables data owner to attain the responsibility of granting or denying access to their data, from a secured communication with an identity provider using a digitally signed token.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 7