Identity management systems are a reality today in the Internet. Single sign-on (SSO) systems allow users to authenticate once in the system and interact with different services providers without the need for creating new accounts. However, most identity management systems only support a simple authentication mechanism, which most of the cases is based on login and password, with its well known associated vulnerabilities like phishing attacks, for instance. In order to mitigate those drawbacks and improve the overall security of the system, we propose an enhancement of SSO systems which allows the identity providers to dynamically choose the best authentication method (e.g. fingerprint, digital certificates, smart cards, etc) being applied to the user based on the users’ device capabilities and context information.
Félix Gómez Mármol
University of Murcia
Triggering IDM Authentication Methods based on Device Capabilities Information
GI SICHERHEIT 2012 Sicherheit - Schutz und Zuverlässigkeit, LNI 195, pp. 235-244, ISBN: 978-3-88579-289-5, Darmstadt, Germany 
Publication year: 2012
Abstract
Related Publications
Identity Management in Cloud Systems
Book Chapter
Security, Privacy and Trust in Cloud Systems, Springer, Eds: S. Nepal, M. Pathan, Part II Cloud Privacy and Trust, ISBN: 978-3-642-38585-8, pp 177-210
Publication year: 2014
Co-Authors
This work would not have been possible without the inestimable contribution of:
- Marcus Q. Kuhnen
- Mario Lischka
Citation
Marcus Q. Kuhnen, Mario Lischka, Félix Gómez Mármol, «Triggering IDM Authentication Methods based on Device Capabilities Information«, GI SICHERHEIT 2012 Sicherheit – Schutz und Zuverlässigkeit, Darmstadt (Germany), 07-09/03/2012
Conference Details
- Website: GI SICHERHEIT 2012 Sicherheit – Schutz und Zuverlässigkeit
- Date: 07-09/03/2012
- Venue: Center for Advanced Security Research Darmstadt, Darmstadt (Germany)