Securing digital identities in the cloud by selecting an apposite federated identity management from SAML, OAuth and OpenID Connect

Abstract

Access to computer systems and the information held on them, be it commercially or personally sensitive, is naturally, strictly controlled by both legal and technical security measures. One such method is digital identity, which is used to authenticate and authorize users to provide access to IT infrastructure to perform official, financial or sensitive operations within organisations. However, transmitting and sharing this sensitive information with other organisations over insecure channels always poses a significant security and privacy risk. An example of an effective solution to this problem is the Federated Identity Management (FIdM) standard adopted in the cloud environment. The FIdM standard is used to authenticate and authorize users across multiple organisations to obtain access to their networks and resources without transmitting sensitive information to other organisations. Using the same authentication and authorization details among multiple organisations in one federated group, it protects the identities and credentials of users in the group. This protection is a balance, mitigating security risk whilst maintaining a positive experience for users. Three of the most popular FIdM standards are Security Assertion Markup Language (SAML), Open Authentication (OAuth), and OpenID Connect (OIDC). This paper presents an assessment of these standards considering their architectural design, working, security strength and security vulnerability, to cognise and ascertain effective usages to protect digital identities and credentials. Firstly, it explains the architectural design and working of these standards. Secondly, it proposes several assessment criteria and compares functionalities of these standards based on the proposed criteria. Finally, it presents a comprehensive analysis of their security vulnerabilities to aid in selecting an apposite FIdM. This analysis of security vulnerabilities is of great significance because their improper or erroneous deployment may be exploited for attacks.

Publication DOI: https://doi.org/10.1109/RCIS.2017.7956534
Divisions: College of Engineering & Physical Sciences
Additional Information: © 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Event Title: 11th IEEE International Conference on Research Challenges in Information Science (RCIS)
Event Type: Other
Event Dates: 2017-05-10 - 2017-05-12
ISBN: 978-1-5090-5477-0, 978-1-5090-5476-3
Last Modified: 04 Mar 2024 17:45
Date Deposited: 14 Sep 2020 12:12
Full Text Link:
Related URLs: https://ieeexpl ... ocument/7956534 (Publisher URL)
PURE Output Type: Conference contribution
Published Date: 2017-06-26
Accepted Date: 2017-01-01
Authors: Naik, Nitin (ORCID Profile 0000-0002-0659-9646)
Jenkins, Paul

Download

[img]

Version: Accepted Version

| Preview

Export / Share Citation


Statistics

Additional statistics for this record