Current identity management systems are not concerned with user privacy. Users must assume that identity providers and service providers will ensure their privacy, which is not always the case. This paper proposes an extension of existing Federated Single Sign-On (FSSO) systems that adopts the beneficial properties of the User- Centric Identity Management (UCIM) model. This new identity management system allows the users to control and enforce their privacy requirements while still retaining the convenience of single sign on over a federation of service providers. Coloured Petri Nets are used to formally model the new identity management system to provide assurance that the privacy goals are achieved. To our knowledge, Coloured Petri Nets have not been used to model privacy in identity management systems before.
展开▼
机译：当前的身份管理系统不关心用户隐私。用户必须假定身份提供者和服务提供者将确保其隐私，但情况并非总是如此。本文提出了对现有联合单点登录（FSSO）系统的扩展，该系统采用了以用户为中心的身份管理（UCIM）模型的有益特性。这种新的身份管理系统使用户可以控制和执行其隐私要求，同时仍保留服务提供商联盟上单点登录的便利性。有色Petri网用于对新的身份管理系统进行正式建模，以确保实现隐私目标。据我们所知，Colored Petri Nets之前尚未用于身份管理系统中的隐私建模。
展开▼
