Identity Management Systems Research Articles

Efficiency of using IAM system at the enterprise

The article discusses the problems on a common enterprise that does not have an Identity and Access Management system and describes the benefits which the implementation an IAM system can provide. The main components are listed and the technologies used in IAM systems are described. Effectivity of using an IAM system at the enterprise and the first steps for its implementation are analyzed. Questions that need to be answered before choosing a particular Identity and Access Management system are listed. The aim of this work is to find a solution that will eliminate the problems described in the article, and especially to optimize the employee accounting process, increase password security, and make it easier to grant access to the corporate resources. The choice of IAM solutions on the market is quite diverse. There are solutions that can be installed on company servers, as well as solutions that can be rented as cloud service (Identity as a Service). You can also build your own IAM system using open-source solutions or developing proprietary software. There are many articles in the Internet describing what Identity and Access Management is and why it is so important to use it. But these articles do not include any practical steps or specific recommendations which IAM system to choose. This article focuses on the practical side of the issue. The implementation an IAM system will accelerate the provision access to the enterprise resources for new employees, increase the security of existing information systems, and simplify the procedure for employees to log in the corporate resources before starting to work with them. Despite the difficulties related with the implementation of IAM systems and the fact that the implementation process can take a long time, the benefits of the result will compensate for all the resources spent on implementation.

Czech national e-infrastructure services for HEP

Czech national e-infrastructure services for HEP

Enhancing Threat Detection in Identity and Access Management (IAM) systems

Enhancing Threat Detection in Identity and Access Management (IAM) systems

Analyzing the Role of Blockchain in Identity and Access Management Systems

Analyzing the Role of Blockchain in Identity and Access Management Systems

An assessment of the legal and regulatory framework supporting the implementation of the National Integrated Identity Management System (NIIMS) in Kenya

Abstract This study sought to establish the elements that constitute comprehensive legal and regulatory landscape for successful digital identity system establishment and implementation. Subsequently, the study sought to assess whether these elements were present in the establishment and implementation of the National Integrated Identity Management System (NIIMS) in Kenya. The study adopted a qualitative approach, data was obtained firstly, through literature review that provided background information to the study. Secondly, semi structured interviews were undertaken on purposively selected key informants. The study established that the elements that constitute a robust legal and regulatory framework for digital identity (ID) establishment and implementation include presence of a constitutional provision on the right to privacy; existence of a digital ID law governing the establishment of the system; amendment of laws relating to the registration of persons; existence of a data protection law; existence of an overarching law governing the digital economy among others. Largely, most of these elements were present in Kenya. However, the legislative approach adopted in crafting digital ID law in Kenya was wanting. This has undermined effective implementation of the NIIM system by among other things eroding public confidence in the system. The study concluded that effective operation of the system hinged on the existence of a robust and comprehensive legal and regulatory framework that will engender users’ trust in the system. In this regard, the study recommended review of the existing legal framework to ensure that it underpins both the foundational and functional aspects of the NIIM system.

TelcoID: Mobile Network Operators as Identity Providers

Phone numbers are globally unique identifiers that are extensively utilized in online service registration processes of verifying a user's identity. They are issued by mobile network operators (MNO) during the customer onboarding process, after performing a know-your-customer (KYC) process. In an increasing number of countries, regulatory bodies prescribe MNOs to verify customers’ identities by checking their national identity cards card during the KYC process, making the digital identity associated with a phone number trustworthy and valuable. However, MNOs do not capitalize on customers’ digital identities for anything other than offering connectivity. This paper explores how MNOs can empower their customers with trustworthy digital identities, referred to as TelcoIDs, that the customers are free to utilize for all sorts of online services. To be compliant with the latest privacy-preserving principles of the Self-sovereign Identity paradigm, a decentralized identity management system that is commonly operated and governed by different MNOs, serves as the technical foundation for TelcoIDs. The proposed concept has the potential to not only add value for customers of MNOs but also to create a new business opportunity for MNOs in the role of trustful identity providers.

Review of blockchain technology in government systems: Applications and impacts in the USA

This study examines blockchain applications in the USA's government systems, analyzing its effectiveness in public administration and governance. Blockchain technology, initially introduced as the underlying infrastructure for cryptocurrencies, has garnered substantial attention for its potential to transform various sectors, including government systems. This paper provides a comprehensive review of the applications and impacts of blockchain technology in the United States' governmental landscape. As governments worldwide seek innovative solutions to enhance transparency, efficiency, and security, blockchain emerges as a disruptive force with the capacity to reshape administrative processes. The study elucidates the fundamental principles of blockchain technology, emphasizing its decentralized and tamper-resistant nature. It also explores diverse applications within government systems, ranging from identity management and voting systems to supply chain traceability and public finance. The analysis delves into specific use cases, detailing how blockchain enhances data integrity, reduces fraud, and streamlines bureaucratic processes. Furthermore, the paper assesses the implications of blockchain adoption for government operations, highlighting potential benefits such as cost reduction, increased accountability, and enhanced citizen trust. Challenges and considerations, including scalability, interoperability, and regulatory frameworks, are scrutinized to provide a balanced understanding of the technology's limitations. The review extends to the United States' federal and state-level initiatives, examining pilot projects and ongoing implementations that leverage blockchain in areas such as land registries, healthcare data management, and procurement. Insights into the collaborative efforts between public and private sectors are explored, shedding light on the collaborative frameworks essential for successful blockchain integration. Ethical considerations and privacy concerns are addressed within the context of blockchain applications in government, emphasizing the need for robust safeguards to protect sensitive information while harnessing the transformative potential of the technology. This paper synthesizes the current state of blockchain technology in the United States' government systems, offering a nuanced understanding of its applications and impacts. As blockchain continues to mature and gain traction, this review contributes valuable insights for policymakers, researchers, and practitioners, fostering a deeper appreciation for the transformative potential of blockchain in shaping the future of government operations.

Enhancing Security of 5G-Enabled IoT Systems through Advanced Authentication Mechanisms: A Multifaceted Approach

The Internet of Things (IoT) has revolutionized communication among devices, offering unprecedented efficiency and convenience. However, the widespread adoption of IoT has raised significant security concerns, emphasizing the need for robust security measures. This study focuses on the crucial aspect of authentication within the layered architecture of IoT systems. Authentication is foundational to the architecture, ensuring the availability, security, and integrity of IoT services and data. The research evaluates the current state of IoT authentication techniques, highlighting limitations in conventional solutions. To address these shortcomings, an advanced authentication framework is proposed, incorporating cutting-edge technologies such as blockchain, artificial intelligence, and biometrics. The framework employs biometric data for a dynamic and adaptive authentication process, enhancing security and accuracy in user and device identification. Blockchain technology is integrated to establish a decentralized and tamper-resistant identity management system, reducing the risk of unauthorized access and data manipulation. Artificial intelligence continuously adapts authentication processes based on behavioural patterns, bolstering the system's resilience against evolving cyber threats. The study also discusses the practical application of the proposed authentication system, considering resource limitations in IoT devices. It provides insights into the efficiency, scalability, and interoperability of the suggested solution within various IoT ecosystems. The research contributes to the ongoing discourse on IoT security by thoroughly examining enhanced authentication procedures. Organizations can fortify their IoT deployments against a growing array of cyber threats by prioritizing advanced authentication within a layered design, fostering a more secure and reliable IoT ecosystem. Additionally, the study presents a comprehensive overview of the state-of-the-art security in IoT, exploring various designs, enabling technologies, and protocols. It delves into security challenges at each architectural tier, providing an in-depth analysis of attack taxonomies and advanced defenses. The article serves as a valuable resource for researchers and academics in the IoT sector, offering a detailed survey of architectural security, identification of challenges, resolution strategies, and insights into the evolving landscape of IoT. The study provides a comprehensive survey of IoT architectural security, identifying challenges, proposing resolutions, and highlighting changes in the IoT domain. This research aims to enhance the accuracy by 80% of IoT security, fostering a more secure and reliable IoT ecosystem.

A Blockchain-Enhanced Self-Sovereign Identity Platform for Corporate Resource Security

In an era dominated by concerns of data breaches, and identity theft, security of corporate resources and assets has become paramount. Centralized identity management systems traditionally present vulnerabilities that can fundamentally threaten corporate security. This paper introduces a novel platform to identity management in organizations, leveraging the principles of Self-Sovereign Identity (SSI) and the technological robustness of block- chain. By giving individuals unwavering control over their digital identities and reducing dependence on centralized intermediaries, SSI provides a transformative advancement in security and privacy. When combined with blockchain's immutable, decentralized, and transparent nature, this model ensures a verifiable, tamper-proof, and holistic iden- tity management system. Beyond individual identity man- agement, this paradigm provides corporations with a ro- bust mechanism to protect their assets, both digital and physical. We explore the architectural design and benefits of implementing the proposed system, BlockSSI-CRS, emphasizing its transformative potential for corporate resource protection. Through rigorous analysis, this paper highlights the feasibility of a blockchain-enhanced SSI platform in the context of corporate security needs.

Advanced Security Features in Oracle HCM Cloud

Oracle HCM Cloud is a complete solution for managing human capital that incorporates sophisticated security measures. These features are meant to secure sensitive employee and organisational data in a digital context that is constantly developing. The purpose of this abstract is to investigate the fundamental security mechanisms that are included into Oracle HCM Cloud. The focus is on the role that these mechanisms play in guaranteeing the confidentiality, integrity, and availability of data while adhering to demanding regulatory requirements. One of the most important aspects of the security architecture that Oracle HCM Cloud has is its powerful identity and access management system. In order to guarantee that only authorised workers are able to access sensitive information, this system makes use of multi-factor authentication (MFA) and single sign-on (SSO) features. By demanding additional verification procedures in addition to the conventional password authentication, multi-factor authentication (MFA) provides an additional layer of protection. User experience is simplified with single sign-on (SSO), which enables seamless access across numerous apps using a single set of credentials. This reduces the danger of password-related breaches, which is a significant benefit.

Theorizing Omission: State Strategies for Withholding Official Recognition of Personhood

This article theorizes “omission,” which I define as the condition of being left out of administrative apparatuses, such as civil registers, censuses, and identity management systems. According to this theory, omission is not necessarily accidental but can constitute a political strategy. When even excluded statuses can be powerful grounds for claiming rights, resources, or membership, state actors can subvert such claims-making potential by depriving unwanted populations of the practical, material capacity to establish their legal personhood through documents and records. To situate omission, I develop a typology of documentary strategies additionally comprising “recognition,” “claims-making,” and “evasion.” Although my theorizing is informed by ethnographic research with unregistered families in Malaysia, scholars can apply this typology to multiperspectival, relational analyses of other empirical cases of documentary politics. Studying omissions has scholarly and ethical imperatives, not least to record the lives of populations denied, at times with existential consequences, the right to recognition.

PT-SSIM: A Proactive, Trustworthy Self-Sovereign Identity Management System

Digital Identity Management (DIM) systems have become challenging, especially given the current progression in ubiquitous environments enclosing cooperative Internet of Things (IoT) devices, individuals, and organizations. Self-Sovereign Identity (SSI) has recently surfaced to manifest the notion of decentralized DIMs enlivened by users autonomy. This paper presents a proactive, trustworthy solution for managing digital users data and identity information without risking its integrity, security, privacy, and confidentiality. Accordingly, we propose a decentralized SSI-enabled cloud storage model that enables secure access control and frequent data integrity checking mechanism. The presented model ensures the resiliency of SSI-enabled operations, including users registration, data identification, external information distribution, integrity checking operations, identity information authentication and verification, and decentralized external and shareable operations.

The construction of self-sovereign identity: Extending the interpretive flexibility of technology towards institutions

Ever-growing concerns over ‘Big Brother’ continue driving individuals towards user-centric identity management systems. Nascent innovations are framed as offering Self-Sovereign Identity (SSI). Because of the association with value-laden ideals and technical components like blockchain, SSI is caught up with both hype and idiosyncrasy. Competing interpretations of SSI damage the public discourse and risk misrepresenting affordances these systems might offer. Based on a qualitative inductive interview study and document analysis, this article extrapolates a constructivist theoretical frame – the Extended Model of Interpretive Flexibility – which combines insights from the Social Construction of Technology and the Structurational Model of Technology. The Extended Model of Interpretive Flexibility highlights malleability in the technical implementations and social representations, which in turn is affected by and influences institutional properties around SSI. This research further offers implications for practice around the implementation of SSI, in particular regarding policy, management, and design. For theory on public sector information systems, the proposed model has generalizable potential for the analysis of socio-technical systems and offers future research directions.

A BIBLIOMETRIC STUDY ON BLOCKCHAIN CONCEPT: A THEME ANALYSIS AND FUTURE DIRECTIONS FOR COMPUTER SCIENCE TRAINING

This paper aims to study the blockchain concept domain in the computer science field due to bibliometric study. Authors employed bibliometric and network analysis techniques to analyze existing literature. In total, 719 articles in the period of 2019 to August 2023 from the Web of Science (WOS) database were analyzed after applying search string, and criteria for inclusion and exclusion. Initial data screening involved the extraction of fundamental information, followed by data analysis based on co-occurrence, bibliographic coupling, and citation using special program software VOSviewer and R program. research areas "compute science" and "engineering". In addition to that, VOSviewer and R-based tools illustrate the application of text mining involves utilizing computational techniques to extract, analyze, and represent the key concepts and relationships within the field of blockchain technology. Data analysis primarily involved co-occurrence analysis, bibliographic coupling, co-authorship examination, citation analysis, and co-citation analysis. In the context of a blockchain concept thematic analysis, was applied clustering by coupling. Furthermore, it was conducted the thematic analysis to scrutinize the content of prior studies in the computer science field using clustering by coupling. Ranking of the authors, organizations, and countries was applied according to total link strength metric which was used to quantify the overall strength of connections between nodes within a network. Besides, citation analysis has also been conducted to assess the articles' ranking, considering both worldwide and localized citations. Bibliometric results indicate blockchain concepts within such thematic frameworks as access control scheme, identity management system, supply chain management, artificial intelligence integration, blockchain technology applications, and blockchain smart contract.

Adapting Blockchain for Secure and Efficient Identity Management in Oman's e-Government

This research paper examines the potential application of blockchain technology in e-government identity management, with a specific focus on the case of Oman. Traditional centralized identity systems in e-government face various challenges, such as security vulnerabilities and limited compatibility among government agencies. By utilizing the decentralized and unalterable characteristics of blockchain, Oman can enhance the security, privacy, efficiency, and transparency of identity management in e-government. The advantages include improved security and privacy, streamlined processes, data sharing and interoperability, transparency, cost reduction, and empowerment of citizens. The paper presents examples of blockchain-based identity management systems implemented in different sectors and countries, along with research studies in the field. Additionally, a survey was conducted to assess awareness and willingness to adopt blockchain-based identity management in Oman's e-government. The findings emphasize the importance of considering technical requirements, legal frameworks, interoperability standards, and user acceptance for successful implementation. Overall, blockchain technology offers promising solutions to strengthen identity management in e-government and establish a trustworthy digital environment for citizens and businesses.

A Multi-Round Zero Knowledge Proof Algorithm for Secure IoT and Blockchain Environments

Presented herein is a novel algorithm for multi-round, zero-knowledge proof (ZKP), devised specifically for authenticating factorisation proofs within a variety of cryptographic applications. This advanced algorithm, while maintaining computational complexity within acceptable bounds, offers a secure and proficient solution. The functionality of the algorithm is marked by multiple rounds of interaction between the Prover and Verifier. Initially, the Prover generates a random value and calculates a commitment. Subsequently, the Verifier issues a random challenge, eliciting a computed response from the Prover. To validate the proof, the Verifier verifies the equality of the commitment and the computed response. Efficaciousness of the proposed multi-round ZKP algorithm is demonstrated across diverse input sizes and parameters. Results indicate a success rate exceeding 90% on average, showcasing the robustness of the method. The recurring interaction between the Verifier and Prover enhances the Prover's authentication, thereby improving the algorithm’s reliability. Implementation of the algorithm, achievable through standard cryptographic tools and protocols, can fortify the security of multiple cryptographic applications. A significant application can be found in Digital Identity Management Systems (DIMS). Currently, these systems are vulnerable to a myriad of threats, including identity spoofing, data breaches, and internal security risks. The application of the ZKP algorithm can simultaneously augment security and withhold sensitive information, potentially transforming the DIMS security landscape. Future research may focus on improving the efficiency and scalability of the multi-round ZKP algorithm. There also remains a vast potential for exploring additional applications of this technique within various cryptographic domains.

Identity and access management: "Elevating security and efficiency: Unveiling the crucial aspects of identity and access management”

The foundation of the software is the identity and access management system. A fundamental and essential cybersecurity competency is ensuring that the right parties have timely access to the right resources. The IAM has four domains: IAAA stands for identification, authentication, authorization, and accounting, the second is Privileged Access Management (PAM), third-party Identity Governance and Administration, data governance and protection. In this article, the concepts of identification, authentication, authorization, and accounting are discussed, as well as how IAAA works in an online setting.

A Distributed and Secure Self-Sovereign-Based Framework for Systems of Systems.

Security and privacy are among the main challenges in the systems of systems. The distributed ledger technology and self-sovereign identity pave the way to empower systems and users' security and privacy. By utilizing both technologies, this paper proposes a distributed and self-sovereign-based framework for systems of systems to increase the security of such a system and maintain users' privacy. We conducted an extensive security analysis of the proposed framework using a threat model based on the STRIDE framework, highlighting the mitigation provided by the proposed framework compared to the traditional SoS security. The analysis shows the feasibility of the proposed framework, affirming its capability to establish a secure and privacy-preserving identity management system for systems of systems.

T-FIM: Transparency in Federated Identity Management for Decentralized Trust and Forensics Investigation

Federated Identity Management (FIM) has gained significant adoption as a means to simplify user authentication and service authorization across diverse domains. It serves as a centralized authentication and authorization method, enabling users to access various applications or resources using credentials issued by a universally trusted identity provider (IdP). However, recent security incidents indicate that the reliability of credentials issued by IdP is not absolute in practice. If the IdP fails, it can persistently access any application that trusts it as any user. This poses a significant security threat to the entire system. Furthermore, with the increasing adoption of FIM across diverse scenarios, there is a growing demand for the development of an identity management system that can effectively support digital forensics investigations into malicious user behavior. In this work, we introduce transparency to federated identity management, proposing T-FIM to supervise unconditional trust. T-FIM employs privacy-preserving logs to record all IdP-issued tokens, ensuring that only the true owner can access the exact token. We utilize identity-based encryption (IBE), but not just as a black box, encrypting tokens before they are publicly recorded. In addition, we propose a decentralized private key generator (DPKG) to provide IBE private keys for users, avoiding the introduction of a new centralized trust node. T-FIM also presents a novel approach to digital forensics that enables forensic investigators to collect evidence in a privacy-preserving manner with the cooperation of the DPKG. We conduct a comprehensive analysis of the correctness, security, and privacy aspects of T-FIM. To demonstrate the practical feasibility of T-FIM, we evaluated the additional overhead through experimental evaluations. Additionally, we compared its performance with other similar schemes to provide a comprehensive understanding of its capabilities and advantages.

Enhancing identity and access management using Hyperledger Fabric and OAuth 2.0: A block-chain-based approach for security and scalability for healthcare industry

Block-chain-based Identity and access management framework is a promising solution to privacy and security issues raised during the exchange of patient data in the healthcare industry. This technology ensures the confidentiality and integrity of sensitive information by providing a decentralized and immutable ledger. In our research, we propose an identity and access management system that employs Hyper-ledger Fabric and OAuth 2.0 for improved security and scalability. This combination allows for transparency and immutability of user transactions and minimizes the risk of fraud and unauthorized access. Additionally, Hyper-ledger Fabric's privacy, security, and scalability features enable granular access control to sensitive information, while OAuth 2.0 authorizes only trusted third-party applications to access specific data on the Fabric network. The proposed approach can handle large volumes of data and support multiple applications, thus providing a secure and scalable solution for managing access to the Fabric network. Moreover, our solution employs Role-based access control based on the patient's role, ensuring privacy and confidentiality. Our statistical analysis demonstrates that the proposed approach can efficiently and securely manage patient identity and access, potentially transforming the healthcare industry by enhancing data interoperability, reducing fraud and errors, and improving patient privacy and security. Furthermore, our solution can facilitate compliance with regulatory requirements such as HIPAA and GDPR.