TY  - CONF
EP  - 623
VL  - 2
A1  - Khattak, Z.A.
A1  - Sulaiman, S.
A1  - Manan, J.-L.A.
UR  - https://www.scopus.com/inward/record.uri?eid=2-s2.0-78049381910&doi=10.1109%2fITSIM.2010.5561611&partnerID=40&md5=02985d2558c1e776a3f37b6a092e4283
SN  - 9781424467181
Y1  - 2010///
SP  - 618
TI  - A study on threat model for federated identities in federated identity management system
ID  - scholars1092
KW  - Federated identity; Identity information; Identity theft; Trust relationship; Trusted computing
KW  -  Authentication; Crime; Data privacy; Information technology; Network security
KW  -  Management
N2  - Federated Identity Management (FIM) based on standards allows and facilitates participating federated organizations to share users identity attributes, facilitate authentication and grant or deny service access requests. Using single sign-on facility users authenticates only once to home identity provider and logged into access successive service providing service providers within federation. User's identity theft, misused of user identity information via single sign-on facility in identity providers and service providers, and trustworthiness of subject, identity providers and service providers are active concerns in federated identity management systems. In addition, we had explored trusted computing technology, which covers Trusted Platform Module security features such as Trusted Platform Module Identity, Integrity Measurement and Key certification as well as Trusted Network Connect. In this paper, we presented conceptual threat model for inter-domain web single sign-on in federate identity management system. For this, we set identity theft, misused of identity information, and trust relationship scenarios and in the end, we discussed how trusted computing technology use can effectively resolve identity theft, misused of identity information, and trust relationship concerns in federated identity management system. © 2010 IEEE.
N1  - cited By 30; Conference of 2010 International Symposium on Information Technology, ITSim'10 ; Conference Date: 15 June 2010 Through 17 June 2010; Conference Code:81915
AV  - none
CY  - Kuala Lumpur
ER  -