On Identity Assurance in the Presence of Federated Identity Management Systems

Baldwin, Adrian ; Casassa Mont, Marco ; Shiu, Simon

HP Development Company

关键词: identity;    assurance;    identity assurance;    trust;    federation;   

RP-ID  :  HPL-2007-47

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

In this paper we address the appropriate management of risk in federated identity management systems by presenting an identity assurance framework and supporting technologies. We start by discussing the risk mitigation framework that should be part of any identity assurance solution. We then demonstrate how our model based assurance technologies can be used to report success of an identity assurance programme. We discuss how this approach can be used to gain trust within a federated identity management solution both by communicating the nature of the assurance framework and that risks are successfully being mitigated. Finally, we show the importance of automation of controls in easing operational costs; providing improved audit information and changing the risk mitigation landscape. 17 Pages