Universal Identity and Access Management Framework

for Future Ecosystems

Daniela Pöhn⁺ and Wolfgang Hommel

Universität der Bundeswehr München, Research Institute CODE, 85579 Neubiberg, Germany

{daniela.poehn, wolfgang.hommel}@unibw.de

Abstract

Identity and access management (I&AM) plays a crucial role in today’s IT infrastructure. In order to access a service, the user needs to authenticate. I&AM maintains attributes, credentials, roles, and permissions for an identifier, which is, e.g., linked to a human person. The variety of approaches to solve I&AM makes it hard to compare or even combine them. As various protocols are developed to solve real-world problems, it is increasingly difficult to provide secure implementations and configurations. In order to gain an overview and to enable interoperability, this article proposes an identity and access management framework (IAMF). Based on a motivating scenario, different requirements are mapped with identity management models and approaches within. These findings build the foundation for IAMF, consisting of a technical architecture and interfaces for processes. The fundamental difference to existing systems is its integrating, interoperable, and modular approach.

Keywords: Identity Management, Identity Management Framework, Federated Identity Management,

Framework

+: Corresponding author: Daniela Pöhn
Universität der Bundeswehr München, Research Institute CODE, 85579 Neubiberg, Germany, Tel: +49 89 6004 2495

Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), Vol. 12, No. 1, pp. 64-84, March 2021 [pdf]

Received: December 21, 2020; Accepted: February 18, 2021; Published: March 31, 2021

DOI: 10.22667/JOWUA.2021.03.31.064