Privacy and Identity Management in Cloud includes about Motivation, Identity Management (IDM), Goals of Proposed User-Centric IDM, Mechanisms, Description of proposed solution, Advantages of the Proposed Scheme, Conclusion & Future Work. | Privacy and Identity Management in Cloud Outline Motivation Identity Management (IDM) Goals of Proposed User-Centric IDM Mechanisms Description of proposed solution Advantages of the Proposed Scheme Conclusion & Future Work References Questions? Motivation User on Amazon Cloud Name E-mail Password Billing Address Shipping Address Credit Card Name E-mail Shipping Address Name Billing Address Credit Card Name E-mail Password Billing Address Shipping Address Credit Card Name E-mail Shipping Address Motivation User on Amazon Cloud Name E-mail Password Billing Address Shipping Address Credit Card Name Billing Address Credit Card Identity Management (IDM) IDM in traditional application-centric IDM model Each service keeps track of identifying information of its users. Existing IDM Systems Microsoft Windows CardSpace [W. A. Alrodhan] OpenID [] PRIME [S. F. Hubner, Karlstad Univ] These systems require a trusted third party and do not work on an untrusted host. If Trusted Third Party is compromised, all the identifying information of the users is also compromised leading to serious problems like Identity Theft. [Latest: AT&T iPad leak] IDM in Cloud Computing Cloud introduces several issues to IDM Collusion between Cloud Services Users have multiple accounts associated with multiple service providers. Sharing sensitive identity information between services can lead to undesirable mapping of the identities to the user. Lack of trust Cloud hosts are untrusted Use of Trusted Third Party is not an option Loss of control Service-centric IDM Model IDM in Cloud needs to be user-centric Goals of Proposed User-Centric IDM for the Cloud Authenticate without disclosing identifying information Ability to securely use a service while on an untrusted host (VM on the cloud) Minimal disclosure and minimized risk of disclosure during communication between user and service provider (Man in the Middle, Side Channel and Correlation Attacks) Independence | Privacy and Identity Management in Cloud Outline Motivation Identity Management (IDM) Goals of Proposed User-Centric IDM Mechanisms Description of proposed solution Advantages of the Proposed Scheme Conclusion & Future Work References Questions? Motivation User on Amazon Cloud Name E-mail Password Billing Address Shipping Address Credit Card Name E-mail Shipping Address Name Billing Address Credit Card Name E-mail Password Billing Address Shipping Address Credit Card Name E-mail Shipping Address Motivation User on Amazon Cloud Name E-mail Password Billing Address Shipping Address Credit Card Name Billing Address Credit Card Identity Management (IDM) IDM in traditional application-centric IDM model Each service keeps track of identifying information of its users. Existing IDM Systems Microsoft Windows CardSpace [W. A. Alrodhan] OpenID [] PRIME [S. F. Hubner, Karlstad Univ] These systems require a trusted third party and do not work on an untrusted host.
