User Centric Identity Management
Speaker: Dr Audun Josang, DSTC
When: 2004-12-02 14:00:00
Venue: 78-622
Host: Prof Neil Bergmann
Abstract:Identity management is an area where there are strong security
mechanisms available, but where the security still is unsatisfactory
due to poor usability. The traditional approach to online identity
management is to let users identify themselves through unique
identifiers, and authenticate themselves using security credentials
such as passwords. This model, which is used for all types of
access to online services and resources, is relatively simple for
service providers but is rapidly becoming unmanageable for
users. The rapid growth in the number of online services based on
this model now results in the users being overloaded with
identifiers and credentials that they need to manage. For this
reason, and also for the purpose of coordinating related services
from different service providers, new identity management models are
being proposed. Some of these models have relatively complex trust
requirements, and the user groups have so far had little experience
with them.
This presentation will give an overview of trust management models
in use today, with their strengths and weaknesses. User centric
identity management will then be presented as a method for improving
the usability of online authentication. The advantage of this
solution is that it can be implemented incrementally in coexistence
with legacy identity management systems. Improved usability through
user centric identity management will potentially result in both
increased security and increased uptake of online services.
Biography:Audun Josang is the research leader in the areas of security and
trust management at the Distributed Systems Technology Centre in
Brisbane. His research focuses on trust and reputation systems in
addition to information security. Audun received his PhD from the
Norwegian University of Science and Technology in 1998, and has a
MSc in Information Security from Royal Holloway College, University
of London, and a BSc in Telematics from the Norwegian Institute of
Technology.
Type: ITEE Seminar
Contact:Prof Neil Bergmann, seminar host (n.bergmann@itee.uq.edu.au)
or Guido Governatori (ITEE seminar co-ordinator)
(guido@itee.uq.edu.au)