Authors:
Jorge Navas
and
Marta Beltrán
Affiliation:
Department of Computing, ETSII, Universidad Rey Juan Carlos, Madrid and Spain
Keyword(s):
e-Government, Federated Identity Management (FIM), Mobile Connect, OpenID Connect, Privacy, SAML, Threat Modelling.
Related
Ontology
Subjects/Areas/Topics:
Data and Application Security and Privacy
;
Ethical and Legal Implications of Security and Privacy
;
Identity Management
;
Information and Systems Security
;
Privacy
;
Privacy Enhancing Technologies
Abstract:
The ability to verify citizens’ identity and to authenticate and to authorize them when accessing to e-Government services (such as on-line voting, licence renewal or tax payment) is crucial for the digital transformation of public administrations. Governments need identity management mechanisms valid across different services, platforms, devices, technologies and even physical borders. Federated Identity Management (FIM) can help in ensuring secure identity management, in improving citizens’ experience and in increasing services’ accessibility. But this comes with a price since relying on Identity Providers, whether public or private, poses new privacy threats that has to be faced. This paper presents a threat model of the most promising and extended FIM specifications, OpenID Connect and Mobile Connect, when used as federated identity management solutions for e-Government services. A set of three improvements is proposed to avoid these threats or to mitigate their impacts, taking i
nto account both, specification and implementation aspects. Furthermore, guidelines and recommendations in order to improve future versions of the specifications and/or their implementations are provided for developers, providers and policy makers.
(More)