Adequate Security Protocols Adopt in a Conceptual Model in Identity Management for the Civil Registry of Ecuador

International Conference on Materials, Alloys and Experimental Mechanics 2017

材料科学;金属学;机械制造

Toapanta, Moisés^1 ; Mafla, Enrique^2 ; Orizaga, Antonio^3

Computer Science Department, Universidad Politécnica Salesiana Del Ecuador, Chambers 227 and 5 of Junio, Guayaquil, Ecuador^1

Faculty in Engineering Systems, Escuela Politécnica Nacional Ladrón de Guevara, Quito

E11-253, Ecuador^2

Information Systems Department CUCEA, Universidad de Guadalajara Periférico Norte No 799, Núcleo Universitario Los Belenes, Zapopan, Jalisco

C.P. 45100, Mexico^3

关键词: Audit;    Authorization;    Distributed database;    Exploratory research;    Identity management;    Identity models;    Security protocols;    Technological infrastructure;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/225/1/012087/pdf
DOI  :  10.1088/1757-899X/225/1/012087

学科分类：材料科学（综合）

来源: IOP

【 摘 要 】

We analyzed the problems of security of the information of the civil registries and identification at world level that are considered strategic. The objective is to adopt the appropriate security protocols in a conceptual model in the identity management for the Civil Registry of Ecuador. In this phase, the appropriate security protocols were determined in a Conceptual Model in Identity Management with Authentication, Authorization and Auditing (AAA). We used the deductive method and exploratory research to define the appropriate security protocols to be adopted in the identity model: IPSec, DNSsec, Radius, SSL, TLS, IEEE 802.1X EAP, Set. It was a prototype of the location of the security protocols adopted in the logical design of the technological infrastructure considering the conceptual model for Identity, Authentication, Authorization, and Audit management. It was concluded that the adopted protocols are appropriate for a distributed database and should have a direct relationship with the algorithms, which allows vulnerability and risk mitigation taking into account confidentiality, integrity and availability (CIA).