Identity management using SAML for mobile clients and Internet of Things

Abstract

Cloud computing is a computing paradigm that provides a set of scalable resources on demand. Mobile clients/users and Internet of Things (IoT) are using cloud resources for their applications. However, it also is a target of cyber-attacks and creates risks for data privacy and protection. Identity management (IdM) has emerged as an important issue for reducing complexity and improving the user experience when accessing services. In addition, nowadays networks and/or security administrators added SAML to authentication services. These service options are available for different uses including a cloud subscriber. In this work, the SAML representation of existing identity management frameworks and its suitability are emphasized. We introduced a new representation of SAML that makes it lightweight, easier to use and easier to parse. This representation is demonstrated using JSON. In this new SAML representation, we enhanced the performance by marshaling the SAML by 28.99%. In this paper, we will go into these challenges to introduce a new representation for the identity and access management by using a markup language. Our results show that the proposed representation is suitable for small processing power devices for faster generation, parsing, and communication.

Keywords

IoT mobile client cloud computing XML JSON IdM SAML

Get full access to this article

View all access options for this article.

References

Alioto, IoT: Bird’s eye view, megatrends and perspectives, in: Enabling the Internet of Things, Springer International Publishing AG, 2017. doi:10.1007/978-3-319-51482-6_1.

K.C.

Almeroth,

Obraczka and

De Lucia, A lightweight protocol for interconnecting heterogeneous devices in dynamic environments, in: ICMCS ’99 Proceedings of the IEEE International Conference on Multimedia Computing and Systems, 7–11 June, Florence, Italy, 1999, Added to IEEE Xplore: 06 August 2002. doi:10.1109/MMCS.1999.778477.

Bhandari, UpendraBhoi and

Patel, Identity management frameworks for cloud, International Journal of Computer Applications 83(12) (2013), 25–31. doi:10.5120/14501-2310.

P.A.

Cabarcos,

F.A.

Mendoza,

Marín-López and

Díaz-Sánchez, Enabling SAML for dynamic identity federation management, in: WMNC 2009, IFIP AICT 308 2009, pp. 173–184.

Cao,

F.-Y.

Rao,

Kuzu,

Bertino and

Kantarcioglu, Efficient tree pattern queries on encrypted XML documents, in: The Proceeding of EDBT/ICDT ’13, Genoa, Italy, March 18–22 2013, pp. 1–10.

Catuogno and

Galdi, Achieving interoperability between federated identity management systems: A case of study, Journal of High Speed Networks 20(4) (2014), 209–221. doi:10.3233/JHS-140499.

Catuogno and

Turchi, The dark side of the interconnection: Security and privacy in the web of things, in: Proceedings of 9th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, Blumenau, Brazil, 8–10 July, 2015. doi:10.1109/IMIS.2015.86.

J.M.

del Álamo,

A.M.

Fernández,

Trapero,

J.C.

Yelmo and

M.A.

Monjas, A privacy-considerate framework for identity management in mobile services, Mobile Networks and Applications 16(4) (2011), 446–459. doi:10.1007/s11036-011-0325-3.

Direct-schema, available at https://github.com/IreneKnapp/direct-schema.

10.

Esposito,

Ficco,

Castiglione,

Palmieri and

De Santis, Distributed group key management for event notification confidentiality among sensors, IEEE Transactions on Dependable and Secure Computing (2018). doi:10.1109/TDSC.2018.2799227.

11.

Evans, The Internet of things—How the next evolution of the Internet is changing everything, in CISCO white paper, 2011, http://www.cisco.com/c/dam/en_us/about/ac79/docs/innov/IoT_IBSG_0411FINAL.pdf.

12.

Extensible Markup Language (XML), available at http://www.w3.org/XML/.

13.

Md.S.

Ferdous and

Poet, Dynamic identity federation using security assertion markup language (SAML), in: IDMAN 2013, IFIP AICT 396, 2013, pp. 131–146.

14.

Gavrilovska,

Simunic and

Pejanović-Djurišić, Editorial note, special issue on mobile IoT: Enabling technologies and trends, Wireless Personal Communications 2017(97) (2017), 1641–1643. doi:10.1007/s11277-017-4985-6.

15.

Gellman, 2009.Privacy in the clouds: Risks to privacy and confidentiality from loud, World Privacy Forum, 2009.

16.

Gonzalez,

Miers,

Redígolo,

Simplício,

Carvalho,

Näslund and

Pourzandi A quantitative analysis of current security concerns and solutions for cloud computing, Journal of Cloud Computing: Advances, Systems and Applications (2012), 1–11. doi:10.1186/2192-113X-1-11.

17.

Gopalkrishnn, Cloud computing identity management, Journal of SETLabs Briefings 7(7) (2009), 45–54.

18.

S.K.

Goudos,

P.I.

Dallas,

Chatziefthymiou and

Kyriazakos, A survey of IoT key enabling and future technologies: 5G, mobile IoT, sematic web and applications, Wireless Personal Communications 97 (2017), 1645–1675.

19.

Hodges, Technical comparison: OpenID and SAML, Draft 06, January 2008.

20.

Hodges and

Cantor, SAMLv2 lightweight web browser SSO profile, available at http://identitymeme.org/doc/draft-hodges-saml-lsso-02.txt.

21.

H.-C.

Hsiao,

T.H.-J.

Kim,

Perrig,

Yamada,

S.C.

Nelson,

Gruteser and

Meng, LAP: Lightweight anonymity and privacy, in: IEEE Symposium on Security and Privacy, 2012, pp. 506–520.

22.

Hummer,

Gaubatz,

Strembeck,

Zdun and

Dustdar, An integrated approach for identity and access, in: The ACM Symposium on Access Control Models and Technologies (SACMAT), 2011.

23.

Internet Content Adaptation Protocol (ICAP), available at http://tools.ietf.org/html/rfc350.

24.

Jackson, available at http://jackson.codehaus.org/.

25.

M.B.

Jones, The emerging JSON-based identity protocol suite, in: W3C Workshop on Identity in the Browser, April 27, 2011.

26.

JSON schema draft, available at http://tools.ietf.org/html/draft-zyp-json-schema-03.

27.

JSON schema implementations, available at http://json-schema.org/.

28.

JSON schema implementations, available at http://json-schema.org/implementations.html.

29.

JSON schema validator, available at https://github.com/fge/json-schema-validator.

30.

Khan,

S.U.

Khan,

Zaheer and

Khan, Future Internet: The Internet of things architecture, possible applications and key challenges, in: Proceedings of the 10th International Conference on Frontiers of Information Technology, FIT 2012, 2012, pp. 257–260. doi:10.1109/FIT.2012.53.

31.

Y.-S.

Kim and

K.-H.

Lee, A light-weight framework for hosting web services on mobile device, in: Fifth European Conference on Web Services, Halle, Germany, 26–28 Nov. 2007, pp. 26–28. doi:10.1109/ECOWS.2007.21.

32.

K.D.

Lewis and

J.E.

Lewis, Web single sign-on authentication using SAML, IJCSI International Journal of Computer Science Issues 2 (2009), 41–48.

33.

Maler and

Reed, Options and issues in federated identity management, IEEE Security & Privacy 6(2) (2008), 16–23. doi:10.1109/MSP.2008.50.

34.

Mohamed and

Wijesekera, A lightweight framework for web services implementations on mobile device, in: IEEE First International Conference on Mobile Services, 2012.

35.

Nadalin,

Goodner,

Gudgin,

Barbir and

Granqvist, WS-Trust 1.3, OASIS Standard, March 2007.

36.

Nadalin,

Kaler,

Monzillo and

Hallam-Baker (eds), Web services security: SOAP message security 1.1, (WS-Security 2004), OASIS Standard Specification, February 2006.

37.

OASIS Standard, Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0, 15 March 2005.

38.

OpenSAML v2.0. Available at https://wiki.shibboleth.net/confluence/display/OpenSAML/Home.

39.

J.C.

Ramalho,

Simões and

Carriço (ed. lit.), XATA2007: XML: aplicações e tecnologias associadas: actas da Conferência Nacional, 5, Lisboa, 2007. [S.l.: s.n.], 2007, ISBN 978-972-99166-4-9. pp. 33–46.

40.

Schema.js, available at https://github.com/akidee/schema.js.

41.

Tan and

Wang, Future Internet: The Internet of things, in: The Proceedings of 2010 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE), Vol. 5, 2010, pp. 376–380.

42.

Telecom review. 2011. Importance of identity management in cloud. [Online]. Available at http://telecomreviewna.com/index.php?option=com_content&view=article&id=92:importance-of-identity-management-in-Cloud-computing&catid=37:november-december-2011-issue&Itemid=73.

43.

Tran and

Wietfeld, Approaches for optimizing the performance of a mobile SAML-based emergency response system, Communication Networks Institute (CNI), Faculty of Electrical Engineering and Information Technology, Dortmund University of Technology, Germany.

44.

Tv4, available at http://geraintluff.github.com/tv4/.

45.

XML 1.0 specification produced by the W3C, available at http://www.w3.org/TR/2008/REC-xml-20081126/.

46.

Zhang,

Chen and

R.X.

Lai, Cloudified and software defined 5G networks: Architecture, solutions, and emerging applications, Mobile Netw Appl 2016(21) (2016), 727–728. doi:10.1007/s11036-016-0762-0.