Paper Info
Title
Improvements of pan-european IDM architecture to enable identity delegation based on x.509 proxy certificates and SAML
Abstract
To foster the secure use of telematic services provided by public institutions, most European countries – and others in the rest of the world – are promoting electronic identification systems among their citizens to enable fully reliable identification. However, in today's globalized environment, it is becoming more common for citizens and entities of a given country, with their own electronic credentials under the legal framework of their country, to seek access to the public services provided by other countries with different legal frameworks and credentials. At present, a number of projects in the European Union are attempting to solve the problem through the use of pan-European identity management systems that ensure interoperability between the public institutions of different Member States. However, the solutions adopted to date are inadequate, for they do not envision all possible cases of user interaction with institutions. Specifically, they fail to address a very important aspect provided in different national legal systems, namely delegation of identity, by which a citizen can authorize another to act on his or her behalf in accessing certain services provided by public institutions. This paper provides a thorough analysis of problems of delegation and proposes an architecture based on X.509 Proxy Certificates and SAML assertions to enable delegation in provision of services in the complex and heterogeneous environment presented by the public institutions of the European Union as a whole.
Year
DOI
Venue
2010
10.1007/978-3-642-12368-9_13
WISTP
Keywords
Field
DocType
public institution,different member states,different national legal system,identity delegation,public service,european union,electronic identification system,different legal framework,legal framework,pan-european idm architecture,globalized environment,proxy certificate,european country,identity management,legal system,service provider,management system
Proxy (climate),Internet privacy,Architecture,Interoperability,Computer security,Computer science,Identity management,Public institution,Delegation,Telematics,European union
Conference
Volume
ISSN
ISBN
6033
0302-9743
3-642-12367-8
Citations 
PageRank 
References 
0
0.34
9
Authors
2
Name
Order
Citations
PageRank
Sergio Sánchez García183.69
Ana Gómez Oliva294.40