The Internet as a platform for ubiquitous communication has quickly advanced in the last years. New services have emphasized the limits of the current Internet and motivated the development of the Future Internet. Future communication infrastructures intend to be more distributed and, ideally, more secure, resulting in high complexity. Further, as new technologies emerge, new requirements and security issues are highlighted. These issues reinforce the importance of Identity Management systems for the network infrastructure in the Future Internet, termed Future Network, to provide adequate dynamic services in relation to user's personal data and requirements. Hence, this survey presents the state of the art of Identity Management systems for the Future Network. It highlights the existing architectures, specific devices applied, challenges and future perspectives.

A Survey on Identity Management for the Future Network

Publish/subscribe services have encountered considerable success in the building of modern large-scale mission-critical systems. Such systems are characterized by several non-functional requirements, among which security plays a pivotal role due to the emergence of numerous cyber attacks targeting most mission-critical systems. This requires that the adopted publish/subscribe services have to be equipped with the proper means to protect the exchanged data, to preserve their correct behavior and to face possible attack scenarios. Although significant efforts have been made in this field, many issues are still open. This paper includes an introduction to the principles of securing event notification, and an analysis of the relevant state-of-the-art by both surveying the academic literature over the period 1998–2014 on secure publish/subscribe services and overviewing the current standards for the marketed products. Next, it presents the main challenges that are still unresolved and are worthy of further attention in future research efforts.

On Security in Publish/Subscribe Services: A Survey

Identity management systems store attributes associated with users and employ these attributes to facilitate authorization. The authors analyze existing systems and describe a privacy-driven taxonomy of design choices, which can help technical experts consulting on public policy relating to identity management. The US National Strategy for Trusted Identities in Cyberspace initiative is discussed to illustrate how this taxonomy helps analyze public policy options.

/pdf/federated-identity-management-systems-a-privacy-based-4xenyoewct.pdf

Federated Identity Management Systems: A Privacy-Based Characterization

Electronic healthcare (eHealth) identity management (IdM) is a pivotal feature in the eHealth system. Distributed ledger technology (DLT) is an emerging technology that can achieve agreements of transactional data states in a decentralized way. Building identity management systems using Blockchain can enable patients to fully control their own identity and provide increased confidence in data immutability and availability. This paper presents the state of the art of decentralized identity management using Blockchain and highlights the possible opportunities for adopting the decentralized identity management approaches for future health identity systems. First, we summarize eHealth identity management scenarios. Furthermore, we investigate the existing decentralized identity management solutions and present decentralized identity models. In addition, we discuss the current decentralized identity projects and identify new challenges based on the existing solutions and the limitations when applying it to healthcare as a particular use case.

Distributed Ledger Technology for eHealth Identity Privacy: State of The Art and Future Perspective.

Cloud computing systems represent one of the most complex computing systems currently in existence. Current applications of Cloud involve extensive use of distributed systems with varying degree of connectivity and usage. With a recent focus on large-scale proliferation of Cloud computing, identity management in Cloud based systems is a critical issue for the sustainability of any Cloud-based service. This area has also received considerable attention from the research community as well as the IT industry. Numerous Cloud Identity Management Systems (IDMSs) have been proposed so far; however, most of those systems are neither widely accepted nor considered highly reliable due to their constraints in terms of scope, applicability and security. In order to achieve reliability and effectiveness in IDMs for Cloud, further extensive research needs to be carried out to critically examine Cloud based IDMSs and their level of security. In this work, we have holistically analyzed Cloud IDMSs to better understand the general as well as the security aspects of this domain. From the security perspective, we present a comprehensive list of attacks that occur frequently in Cloud based IDMSs. In order to alleviate those attacks, we present a well-organized taxonomy tree covering the most desired features essential for any Cloud-based IDMSs. Additionally, we have specified various mechanisms of realization (such as access control polices, encryption, self-service) against each of the features of Cloud IDMSs. We have further used the proposed taxonomy as an assessment criterion for the evaluation of Cloud based IDMSs. Our in-depth analysis of various Cloud based IDMSs reveals that most of the systems do not offer support to all the essential features of Cloud IDMS and the ones that do, have their own certain weaknesses. None of the discussed techniques heuristically covers all the security features; moreover, they lack compliance to international standards which, understandably, undermines their credibility. Presented work will help Cloud subscribers and providers in understanding the available solutions as well as the involved risks, allowing them to make more knowledgeable decisions while selecting potential Cloud IDMSs that best suits their functional and security requirements.

/pdf/cloud-identity-management-security-issues-solutions-a-2pyi4texlm.pdf

Cloud identity management security issues & solutions: a taxonomy

This paper presents a survey of identity management from the perspectives of development stages and functions variety of Identity Management The definition and core concepts of identity and identity management have been discussed deeply Identity Management models including isolated model, centralized model, and federated model are grouped by components varying and functions changing Based on the transformation of core design principles, paradigms of identity management are classified into network centric paradigm, service centric paradigm, and user centric paradigm Comparisons of these paradigms and models have been presented And we give a rough classification of current systems to the corresponding paradigms and models

Lin Yang

Papers

A survey of Identity Management technology