Avoidance of performance bottlenecks caused by HTTP redirect in identity management protocols

摘要

HTTP redirect is a convenient scheme to move a Web browser from one web site to another, and is widely used in identity management protocols, including newly emerging User-Centric Identity Management technologies. HTTP redirect, however, can cause a performance bottleneck in the identity management process. Although this problem is already explored partially in OASIS SAML and the Liberty Alliance Project, this paper discusses how the approach used in them can be enhanced from the viewpoint of user centrism. We developed a new model to replace HTTP redirect with server-to-server communication. Performance evaluation of our prototype implementation shows significant improvement of turnaround time for authentication by avoiding HTTP redirect over a 64kbps wireless communication channel.