Personal Identification in the Web Using Electronic Identity Cards and a Personal Identity Provider - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Personal Identification in the Web Using Electronic Identity Cards and a Personal Identity Provider

Résumé

This paper presents a new paradigm for implementing the authentication of individuals within Web sessions. Nowadays many countries have deployed electronic identity cards (eID tokens) for their citizens’ personal identification, but these are not yet well integrated with the authentication of people in Web sessions. We used the concept of Personal Identity Provider (PIdP) to replace (or complement) the role ordinarily given to institutional Identity Providers (IdPs), which are trusted third parties to which service providers delegate the identification and the authentication of their clients. By running locally on a citizen’s computer, the PIdP paradigm is well suited to assist his/her eID-based authentication. In this paper we describe an eID-based authentication protocol handled by a PIdP, its implementation and its integration in a production scenario (a campus-wide, Shibboleth IdP-based authentication infrastructure used in University of Aveiro).
Fichier principal
Vignette du fichier
978-3-662-43826-8_12_Chapter.pdf (388.33 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01400938 , version 1 (22-11-2016)

Licence

Paternité

Identifiants

Citer

André Zúquete, Hélder Gomes, Cláudio Teixeira. Personal Identification in the Web Using Electronic Identity Cards and a Personal Identity Provider. 8th IFIP International Workshop on Information Security Theory and Practice (WISTP), Jun 2014, Heraklion, Crete, Greece. pp.160-169, ⟨10.1007/978-3-662-43826-8_12⟩. ⟨hal-01400938⟩
113 Consultations
130 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More