On Identity Assurance in the Presence of Federated Identity Management

[摘要] In this paper we address the appropriate management of risk in federated identity management systems by presenting an identity assurance framework and supporting technologies. We start by discussing the risk mitigation framework that should be part of any identity assurance solution. We then demonstrate how our model based assurance technologies can be used to report success of an identity assurance programme. We discuss how this approach can be used to gain trust within a federated identity management solution both by communicating the nature of the assurance framework and that risks are successfully being mitigated. Finally, we show the importance of automation of controls in easing operational costs; providing improved audit information and changing the risk mitigation landscape. Publication Info: Published in the Proceedings of DIM'07, November 2, 2007, Fairfax, Virginia, USA. 17 Pages

[发布机构] HP Development Company

[学科分类] 计算机科学（综合）

[关键词] identity;assurance;identity assurance;trust;federation