Choice of suitable Identity and Access Management standards for mobile computing and communication
Authors: Naik, N., Jenkins, P. and Newell, D.
Journal: Proceedings of the 24th International Conference on Telecommunications: Intelligence in Every Form, ICT 2017
ISBN: 9781538606421
DOI: 10.1109/ICT.2017.7998280
Abstract:Enterprises have recognised the importance of personal mobile devices for business and official use. Employees and consumers have been freely accessing resources and services from their principal organisation and partners' businesses on their mobile devices, to improve the efficiency and productivity of their businesses. This mobile computing-based business model has one major challenge, that of ascertaining and linking users' identities and access rights across business partners. The parent organisation owns all the confidential information about users but the collaborative organisation has to verify users' identities and access rights to allow access to their services and resources. This challenge involves resolving how to communicate users' identities to collaborative organisations without sending their confidential information. Several generic Identity and Access Management (IAM) standards have been proposed, and three have become established standards: Security Assertion Markup Language (SAML), Open Authentication (OAuth), and OpenID Connect (OIDC). Mobile computing and communication have some specific requirements and limitations; therefore, this paper evaluates these IAM standards to ascertain suitable IAM to protect mobile computing and communication. This evaluation is based on the three types of analyses: Comparative analysis, suitability analysis and security vulnerability analysis of SAML, OAuth and OIDC.
https://eprints.bournemouth.ac.uk/29736/
Source: Scopus
Choice of Suitable Identity and Access Management Standards for Mobile Computing and Communication
Authors: Naik, N., Jenkins, P. and Newell, D.
Journal: PROCEEDINGS OF THE 24TH INTERNATIONAL CONFERENCE ON TELECOMMUNICATIONS (ICT 2017)
https://eprints.bournemouth.ac.uk/29736/
Source: Web of Science (Lite)
Choice of suitable Identity and Access Management standards for mobile computing and communication
Authors: Naik, N., Jenkins, P. and Newell, D.
Conference: ICT 2017. 24th International Conference on Telecommunications "Intelligence in every form"
ISBN: 9781538606421
Abstract:© 2017 IEEE. Enterprises have recognised the importance of personal mobile devices for business and official use. Employees and consumers have been freely accessing resources and services from their principal organisation and partners' businesses on their mobile devices, to improve the efficiency and productivity of their businesses. This mobile computing-based business model has one major challenge, that of ascertaining and linking users' identities and access rights across business partners. The parent organisation owns all the confidential information about users but the collaborative organisation has to verify users' identities and access rights to allow access to their services and resources. This challenge involves resolving how to communicate users' identities to collaborative organisations without sending their confidential information. Several generic Identity and Access Management (IAM) standards have been proposed, and three have become established standards: Security Assertion Markup Language (SAML), Open Authentication (OAuth), and OpenID Connect (OIDC). Mobile computing and communication have some specific requirements and limitations; therefore, this paper evaluates these IAM standards to ascertain suitable IAM to protect mobile computing and communication. This evaluation is based on the three types of analyses: Comparative analysis, suitability analysis and security vulnerability analysis of SAML, OAuth and OIDC.
https://eprints.bournemouth.ac.uk/29736/
http://ict-2017.org/files/ICT_2017%20Programme_0405.pdf
Source: BURO EPrints