Recently, identity management has gained increasing attention from both enterprises and government organisations, in terms of security, privacy, and trust. A considerable number of theories and... Show More

Recently, identity management has gained increasing attention from both enterprises and government organisations, in terms of security, privacy, and trust. A considerable number of theories and techniques have been developed to deal with identity management issues within and between organisations. In this paper, the authors reviewed, assessed, and consolidated the research and development activities of identity management in 14 privately and publicly funded organisations. Furthermore, the authors developed a taxonomy to characterise and classify these identity management frameworks into two categories: processes and technologies. The authors then studied these frameworks by systematically reviewing the whole lifecycle of an identity management framework, including actors, roles, security, privacy, trust, interoperability, and federation. This paper aims to provide the reader with the state of art of existing identity management frameworks and a good understanding of the research issues and progress in this area.

This study provides an application framework toward measures to prevent/control identity theft in conjunction with sources. It also identifies the impact of overall protection of identity theft on... Show More

This study provides an application framework toward measures to prevent/control identity theft in conjunction with sources. It also identifies the impact of overall protection of identity theft on consumer trust, the cost of products/services, and operational performance, all of which in turn contribute to a purchase intention using E-commerce (EC). For the first objective, this study proposes a matrix of sources and measures to prevent and control identity theft. From this matrix, using knowledge from a literature review and judgment based on plausibility, the authors identify global laws, controls placed on organizations, publications to develop awareness, technical management, managerial policy, risk management tools, data management, and control over employees are the potential measuring items to prevent identity theft related to EC. A case study in banking sector through a qualitative approach was conducted to verify the proposed relations, constructs, and measuring items. For the second objective, this research paper conceptualizes a model based on literature review and validates that based on the case study in the financial sector. The model reflects the effects of preventing and controlling identity theft on the costs of products/services, operational performance, and customers’ perception of trust, which would lead to purchase intention in EC.

In the digital world, many organizations are developing different applications (with different purposes) where users are generally represented by a heterogeneous set of attributes. From time to... Show More

In the digital world, many organizations are developing different applications (with different purposes) where users are generally represented by a heterogeneous set of attributes. From time to time, depending on the context, different attributes can provide different digital identities for the same user, often involved in the identification/authentication processes. In the personalized service provision perspective, the scope of identity management becomes much larger, and takes into account information susceptible to change such as user profile information as a whole. Many purely user-centric identity management systems has emerged in the few last years, among them the Higgins project that provides the user with a direct control over his/her data and covers some data security issues. However, a complete user-centric view of extended user identity management is not realistic, in our opinion. In this paper, the authors present G-Profile: a hybrid, open, general-purpose and flexible user modeling system for extended identity management in multi-application environments. G-Profile also tackles the trade-off between users’ and applications’ requirements.

In an effort to protect end users from identity theft, policy makers have enacted numerous regulations that require organizations to acquire identity and access management (IAM) technologies. In... Show More

In an effort to protect end users from identity theft, policy makers have enacted numerous regulations that require organizations to acquire identity and access management (IAM) technologies. In this paper, the authors develop and validate a conceptual framework that captures the unique characteristics of information security regulations and their impact on demand for IAM technologies, and the innovation and market value of IAM firms. Using paired two-sample for means t-tests and the Chow test, the authors demonstrate that the annual changes in sales of IAM firms from 1998 to 2008 are higher than those of other information technology (IT) firms around the time that information security regulations were enacted. The vector autoregression analyses show that IAM innovation is demand-driven, consistent with Schmookler’s “demand-pull” hypothesis, and has been positively valued by stock market investors. As such, our results demonstrate how policy makers can stimulate innovation and increase shareholder wealth by regulating IT consumers.

Identity management projects are often a great challenge for organizations. This is not due to the technical complexity of these projects, but due to the fact that managing access to resources and... Show More

Identity management projects are often a great challenge for organizations. This is not due to the technical complexity of these projects, but due to the fact that managing access to resources and services involves a deep understanding of organizational responsibilities, workflows, and processes. The presented approach aims at enabling domain experts to deal with that complexity without the support of external expertise. To accomplish this, the approach involves the organizational dimension of role engineering. The integration of the organizational layer is achieved by seamlessly integrating model data from process optimization projects. Conceptual models carry knowledge about the structure of an organization and its processes. The role engineering process is driven by the information in these models. The presented approach is not limited to the technical level and thus allows a high degree of automation. This research deals with – in addition to a practical illustration – a theoretical answer to the question whether it is even possible to integrate semi-formal models in an automated transformation process of transformation and requirements for such a process. The aim of this paper is to give a first positive answer to this question and to provide a way to automatically generate a useful setting for configuring identity management systems based on semi-formal models.