Privacy-preserving Digital Identity Management for Cloud Computing
Abstract
Digital identity management services are crucial in cloud computing infrastructures to authenticate users and to support flexible access control to services, based on user identity properties (also called attributes) and past interaction histories. Such services should preserve the privacy of users, while at the same time enhancing interoperability across multiple domains and simplifying management of identity verification. In this paper we propose an approach addressing such requirements, based on the use of high-level identity verification policies expressed in terms of identity attributes, zero-knolwedge proof protocols, and semantic matching techniques. The paper describes the basic techniques we adopt and the architeture of a system developed based on these techniques, and reports performance experimental results.
Keywords
digital identity, cloud computing infrastructures, authenticate, privacy, flexible access control
Date of this Version
2009
Comments
IEEE Data Engineering Bulletin, Vol. 32, #1, March 2009