A User Centric Model for Online Identity and Access Management

The problem today is that users are expected to remember multiple user names and passwords for different domains when accessing the Internet. Identity management solutions seek to solve this problem by creating a digital identity that is exchangeable across organisational boundaries. This is done through the setup of collaboration agreements between multiple domains, thus users can easily switch across domains without having to repeatedly sign-on. However, this technology is accompanied by the threat of user identity and personal information being `stolen'. Criminals make use of fake or `spoofed' websites as well as social engineering techniques to gain illegal access to a user's information. This problem has been catapulted to the fore by the statement that phishing has increased by 8000% over the period January 2005 to September 2006 (APACS, 2007). Thus, the need for user protection from online threats has drastically increased. This paper examines two processes to pr...

• Type: Conference
• Year: 2008
• Where: ISSA
• Authors: Matthew Deas, Stephen Flowerday
• Keywords: Information Technology, ISSA 2008, Multiple User Names, User, User's Information