Traceable and automatic compliance of privacy policies in federated digital identity management

Anna Squicciarini, Abhilasha Bhargav-Spantzel, Alexei Czeskis, Elisa Bertino

Research output: Chapter in Book/Report/Conference proceedingConference contribution

6 Scopus citations

Abstract

Digital identity is defined as the digital representation of the information known about a specific individual or organization. An emerging approach for protecting identities of individuals while at the same time enhancing user convenience is to focus on inter-organization management of identity information. This is referred to as federated identity management. In this paper we develop an approach to support privacy controlled sharing of identity attributes and harmonization of privacy policies in federated environments. Policy harmonizations mechanisms make it possible to determine whether or not the transfer of identity attributes from one entity to another violate the privacy policies stated by the former. We also provide mechanisms for tracing the release of user's identity attributes within the federation. Such approach entails a form of accountability since an entity non-compliant with the users original privacy preferences can be identified. Finally, a comprehensive security analysis details security properties is also offered.

Original languageEnglish (US)
Title of host publicationPrivacy Enhancing Technologies - 6th International Workshop, PET 2006, Revised Selected Papers
Pages78-98
Number of pages21
DOIs
StatePublished - Dec 1 2006
Event6th International Workshop on Privacy Enhancing Technologies, PET 2006 - Cambridge, United Kingdom
Duration: Jun 28 2006Jun 30 2006

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume4258 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Other

Other6th International Workshop on Privacy Enhancing Technologies, PET 2006
CountryUnited Kingdom
CityCambridge
Period6/28/066/30/06

All Science Journal Classification (ASJC) codes

  • Theoretical Computer Science
  • Computer Science(all)

Fingerprint Dive into the research topics of 'Traceable and automatic compliance of privacy policies in federated digital identity management'. Together they form a unique fingerprint.

  • Cite this

    Squicciarini, A., Bhargav-Spantzel, A., Czeskis, A., & Bertino, E. (2006). Traceable and automatic compliance of privacy policies in federated digital identity management. In Privacy Enhancing Technologies - 6th International Workshop, PET 2006, Revised Selected Papers (pp. 78-98). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4258 LNCS). https://doi.org/10.1007/11957454_5