Title
Consistency of user attribute in federated systems
Abstract
In a federated system, it is not uncommon for a user profile registered to a particular system to contain enough attributes to request services from that system. Other attributes may be missing from that profile when services are requested from another system. The problem is that currently, when a change in user attributes happens, it is very difficult for the federation to incorporate the changes in order to resolve the conflict of attributes and maintain the consistency of attributes of users between different systems. Currently ready-for-deploy systems such as Liberty Alliance, Microsoft Windows CardSpace (formerly InfoCard) and Shibboleth do not address this issue efficiently. In general, consistency issues of user attributes in federated system via a 2-dimentional view: consistency between member systems (horizontal consistency) and consistency between federation and local system (vertical consistency). In this paper, we discuss the issue of horizontal consistency to achieve better interoperability and fine-granularity for access control decisions in a federated system by analysing the two approaches to achieve the consistency of user attributes: attribute synchronisation and delegation.
Year
DOI
Venue
2007
10.1007/978-3-540-74409-2_19
TrustBus
Keywords
Field
DocType
horizontal consistency,user attribute,different system,vertical consistency,particular system,ready-for-deploy system,consistency issue,federated system,member system,local system,role based access control,identity management,access control,delegation
Microsoft Windows,Internet privacy,User profile,Interoperability,Computer security,Computer science,Role-based access control,Shibboleth,Identity management,Access control,Delegation,Database
Conference
Volume
ISSN
ISBN
4657
0302-9743
3-540-74408-8
Citations 
PageRank 
References 
3
0.48
14
Authors
3
Name
Order
Citations
PageRank
Quan Pham1131.90
Adrian McCullagh2345.96
Ed Dawson31128129.01