2016/12/06 by Muhammad Rizwan Asghar, Asghar, Muhammad Rizwan, Michael Backes +3 · 1 citation
Computer Science · Social Sciences · #Access Control and Trust #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Internet Traffic Analysis and Secure E-voting #Privacy, Security, and Data Protection
paper · pdf · doi:10.48550/arxiv.1612.01787
openalex publication_date 2016/12/06 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
The management of identities on the Internet has evolved from the traditional\napproach (where each service provider stores and manages identities) to a\nfederated identity management system (where the identity management is\ndelegated to a set of identity providers). On the one hand, federated identity\nensures usability and provides economic benefits to service providers. On the\nother hand, it poses serious privacy threats to users as well as service\nproviders. The current technology, which is prevalently deployed on the\nInternet, allows identity providers to track the user's behavior across a broad\nrange of services.\n In this work, we propose PRIMA, a universal credential-based authentication\nsystem for supporting federated identity management in a privacy-preserving\nmanner. Basically, PRIMA does not require any interaction between service\nproviders and identity providers during the authentication process, thus\npreventing identity providers to profile users' behavior. Moreover, throughout\nthe authentication process, PRIMA provides a mechanism for controlled\ndisclosure of the users' private information. We have conducted comprehensive\nevaluations of the system to show the feasibility of our approach. Our\nperformance analysis shows that an identity provider can process 1,426 to 3,332\nrequests per second when the key size is varied from 1024 to 2048-bit,\nrespectively.\n