Privacy Preserving Attribute Aggregation Method without Shared Identifier Binding

• Item type: Journal(1)
• 公開日: 2014-06-15
• タイトル: Privacy Preserving Attribute Aggregation Method without Shared Identifier Binding
• タイトル / 言語: en
• タイトル: Privacy Preserving Attribute Aggregation Method without Shared Identifier Binding
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: [特集：Applications and the Internet in Conjunction with Main Topics of COMPSAC 2013] privacy, attribute aggregation, identity federation, single sign-on, SAML, security
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_6501
• 資源タイプ: journal article
• 著者所属: National Institute of Informatics (NII)
• 著者所属: National Institute of Informatics (NII)
• 著者所属: National Institute of Informatics (NII)
• 著者所属: The University of Tokyo
• 著者所属: Kyoto University
• 著者所属(英): en
• 著者所属(英): National Institute of Informatics (NII)
• 著者所属(英): en
• 著者所属(英): National Institute of Informatics (NII)
• 著者所属(英): en
• 著者所属(英): National Institute of Informatics (NII)
• 著者所属(英): en
• 著者所属(英): The University of Tokyo
• 著者所属(英): en
• 著者所属(英): Kyoto University
• 著者名: Takeshi, Nishimura; Motonori, Nakamura; Kazutsuna, Yamaji; Hiroyuki, Sato; Yasuo, Okabe
• 著者名(英): Takeshi, Nishimura; Motonori, Nakamura; Kazutsuna, Yamaji; Hiroyuki, Sato; Yasuo, Okabe
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: Identity federation is rapidly spreading, especially in the academic world. In identity federation users' credentials are stored only at their own organization, while the identity system provides authentication results and attributes to various online services, including cloud services that are hosted outside the user's organization. Attribute aggregation is a generalization of basic identity federation that allows a user to collect attributes from multiple authoritative sources. Group membership information is one of use cases, which is necessary to collaborate e.g., in an inter-organizational group. Despite the importance of privacy in identity federation, conventional methods of attribute aggregation require some identifier for a user to be shared among unrelated services, which makes correlation of user activity possible across the services. This privacy issue makes large-scale deployment of collaboration environments built on identity federation difficult. This paper proposes a new attribute aggregation method which does not require any shared identifier for services. The method has been implemented and validated as an extension of an open source federated identity software, Shibboleth. We also provide consideration about practical use of this new attribute aggregation method and comparison with existing technologies.; ------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.22(2014) No.3 (online); DOI http://dx.doi.org/10.2197/ipsjjip.22.472; ------------------------------
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: Identity federation is rapidly spreading, especially in the academic world. In identity federation users' credentials are stored only at their own organization, while the identity system provides authentication results and attributes to various online services, including cloud services that are hosted outside the user's organization. Attribute aggregation is a generalization of basic identity federation that allows a user to collect attributes from multiple authoritative sources. Group membership information is one of use cases, which is necessary to collaborate e.g., in an inter-organizational group. Despite the importance of privacy in identity federation, conventional methods of attribute aggregation require some identifier for a user to be shared among unrelated services, which makes correlation of user activity possible across the services. This privacy issue makes large-scale deployment of collaboration environments built on identity federation difficult. This paper proposes a new attribute aggregation method which does not require any shared identifier for services. The method has been implemented and validated as an extension of an open source federated identity software, Shibboleth. We also provide consideration about practical use of this new attribute aggregation method and comparison with existing technologies.; ------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.22(2014) No.3 (online); DOI http://dx.doi.org/10.2197/ipsjjip.22.472; ------------------------------
• 書誌レコードID / 収録物識別子タイプ: NCID
• 書誌レコードID / 収録物識別子: AN00116647
• 書誌情報: 情報処理学会論文誌; 巻 55, 号 6, 発行日 2014-06-15
• ISSN / 収録物識別子タイプ: ISSN
• ISSN / 収録物識別子: 1882-7764