Intra-federation credential negotiation based on individualized release strategy

In federated world like Shibboleth the release policy- how a member’s personal information to be divulged is set by their home organization. The member has little say in it. In this paper we present an alternate framework where members can specify and personalize their own attribute release policy. Such personalization is however nontrivial. As opposed to simple request-reply based communication, such personalization inherently necessitates a mechanism of negotiation for which we present a new federated negotiation enabled framework. KEY WORDS Privacy, Federation, Negotiation, Authentication.

• Type: Conference
• Year: 2007
• Where: CIIT
• Authors: Javed I. Khan, Kailas B. Bobade, Manas Hardas
• Keywords: Attribute Release Policy, CIIT 2007, Communications, Member’s Personal Information, Release Policy