Cloud computing is a computing paradigm that provides a set of scalable resources on demand. Mobile clients/users and Internet of Things (IoT) are using cloud resources for their applications. However, it also is a target of cyber-attacks and creates risks for data privacy and protection. Identity management (IdM) has emerged as an important issue for reducing complexity and improving the user experience when accessing services. In addition, nowadays networks and/or security administrators added SAML to authentication services. These service options are available for different uses including a cloud subscriber. In this work, the SAML representation of existing identity management frameworks and its suitability are emphasized. We introduced a new representation of SAML that makes it lightweight, easier to use and easier to parse. This representation is demonstrated using JSON. In this new SAML representation, we enhanced the performance by marshaling the SAML by 28.99%. In this paper, we will go into these challenges to introduce a new representation for the identity and access management by using a markup language. Our results show that the proposed representation is suitable for small processing power devices for faster generation, parsing, and communication.
M.Alioto, IoT: Bird’s eye view, megatrends and perspectives, in: Enabling the Internet of Things, Springer International Publishing AG, 2017. doi:10.1007/978-3-319-51482-6_1.
2.
K.C.Almeroth, K.Obraczka and D.De Lucia, A lightweight protocol for interconnecting heterogeneous devices in dynamic environments, in: ICMCS ’99 Proceedings of the IEEE International Conference on Multimedia Computing and Systems, 7–11 June, Florence, Italy, 1999, Added to IEEE Xplore: 06 August 2002. doi:10.1109/MMCS.1999.778477.
3.
R.Bhandari, UpendraBhoi and D.Patel, Identity management frameworks for cloud, International Journal of Computer Applications83(12) (2013), 25–31. doi:10.5120/14501-2310.
4.
P.A.Cabarcos, F.A.Mendoza, A.Marín-López and D.Díaz-Sánchez, Enabling SAML for dynamic identity federation management, in: WMNC 2009, IFIP AICT 3082009, pp. 173–184.
5.
J.Cao, F.-Y.Rao, M.Kuzu, E.Bertino and M.Kantarcioglu, Efficient tree pattern queries on encrypted XML documents, in: The Proceeding of EDBT/ICDT ’13, Genoa, Italy, March 18–22 2013, pp. 1–10.
6.
L.Catuogno and C.Galdi, Achieving interoperability between federated identity management systems: A case of study, Journal of High Speed Networks20(4) (2014), 209–221. doi:10.3233/JHS-140499.
7.
L.Catuogno and S.Turchi, The dark side of the interconnection: Security and privacy in the web of things, in: Proceedings of 9th International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing, Blumenau, Brazil, 8–10 July, 2015. doi:10.1109/IMIS.2015.86.
8.
J.M.del Álamo, A.M.Fernández, R.Trapero, J.C.Yelmo and M.A.Monjas, A privacy-considerate framework for identity management in mobile services, Mobile Networks and Applications16(4) (2011), 446–459. doi:10.1007/s11036-011-0325-3.
9.
Direct-schema, available at https://github.com/IreneKnapp/direct-schema.
10.
C.Esposito, M.Ficco, A.Castiglione, F.Palmieri and A.De Santis, Distributed group key management for event notification confidentiality among sensors, IEEE Transactions on Dependable and Secure Computing (2018). doi:10.1109/TDSC.2018.2799227.
11.
D.Evans, The Internet of things—How the next evolution of the Internet is changing everything, in CISCO white paper, 2011, http://www.cisco.com/c/dam/en_us/about/ac79/docs/innov/IoT_IBSG_0411FINAL.pdf.
12.
Extensible Markup Language (XML), available at http://www.w3.org/XML/.
13.
Md.S.Ferdous and R.Poet, Dynamic identity federation using security assertion markup language (SAML), in: IDMAN 2013, IFIP AICT 396, 2013, pp. 131–146.
14.
L.Gavrilovska, D.Simunic and M.Pejanović-Djurišić, Editorial note, special issue on mobile IoT: Enabling technologies and trends, Wireless Personal Communications2017(97) (2017), 1641–1643. doi:10.1007/s11277-017-4985-6.
15.
R.Gellman, 2009.Privacy in the clouds: Risks to privacy and confidentiality from loud, World Privacy Forum, 2009.
16.
N.Gonzalez, C.Miers, F.Redígolo, M.Simplício, T.Carvalho, M.Näslund and M.PourzandiA quantitative analysis of current security concerns and solutions for cloud computing, Journal of Cloud Computing: Advances, Systems and Applications (2012), 1–11. doi:10.1186/2192-113X-1-11.
S.K.Goudos, P.I.Dallas, S.Chatziefthymiou and S.Kyriazakos, A survey of IoT key enabling and future technologies: 5G, mobile IoT, sematic web and applications, Wireless Personal Communications97 (2017), 1645–1675.
19.
J.Hodges, Technical comparison: OpenID and SAML, Draft 06, January 2008.
20.
J.Hodges and S.Cantor, SAMLv2 lightweight web browser SSO profile, available at http://identitymeme.org/doc/draft-hodges-saml-lsso-02.txt.
21.
H.-C.Hsiao, T.H.-J.Kim, A.Perrig, A.Yamada, S.C.Nelson, M.Gruteser and W.Meng, LAP: Lightweight anonymity and privacy, in: IEEE Symposium on Security and Privacy, 2012, pp. 506–520.
22.
W.Hummer, P.Gaubatz, M.Strembeck, U.Zdun and S.Dustdar, An integrated approach for identity and access, in: The ACM Symposium on Access Control Models and Technologies (SACMAT), 2011.
23.
Internet Content Adaptation Protocol (ICAP), available at http://tools.ietf.org/html/rfc350.
24.
Jackson, available at http://jackson.codehaus.org/.
25.
M.B.Jones, The emerging JSON-based identity protocol suite, in: W3C Workshop on Identity in the Browser, April 27, 2011.
26.
JSON schema draft, available at http://tools.ietf.org/html/draft-zyp-json-schema-03.
27.
JSON schema implementations, available at http://json-schema.org/.
28.
JSON schema implementations, available at http://json-schema.org/implementations.html.
29.
JSON schema validator, available at https://github.com/fge/json-schema-validator.
30.
R.Khan, S.U.Khan, R.Zaheer and S.Khan, Future Internet: The Internet of things architecture, possible applications and key challenges, in: Proceedings of the 10th International Conference on Frontiers of Information Technology, FIT 2012, 2012, pp. 257–260. doi:10.1109/FIT.2012.53.
31.
Y.-S.Kim and K.-H.Lee, A light-weight framework for hosting web services on mobile device, in: Fifth European Conference on Web Services, Halle, Germany, 26–28 Nov. 2007, pp. 26–28. doi:10.1109/ECOWS.2007.21.
32.
K.D.Lewis and J.E.Lewis, Web single sign-on authentication using SAML, IJCSI International Journal of Computer Science Issues2 (2009), 41–48.
33.
E.Maler and D.Reed, Options and issues in federated identity management, IEEE Security & Privacy6(2) (2008), 16–23. doi:10.1109/MSP.2008.50.
34.
K.Mohamed and D.Wijesekera, A lightweight framework for web services implementations on mobile device, in: IEEE First International Conference on Mobile Services, 2012.
35.
A.Nadalin, M.Goodner, M.Gudgin, A.Barbir and H.Granqvist, WS-Trust 1.3, OASIS Standard, March 2007.
36.
A.Nadalin, C.Kaler, R.Monzillo and P.Hallam-Baker (eds), Web services security: SOAP message security 1.1, (WS-Security 2004), OASIS Standard Specification, February 2006.
37.
OASIS Standard, Profiles for the OASIS Security Assertion Markup Language (SAML) V2.0, 15 March 2005.
38.
OpenSAML v2.0. Available at https://wiki.shibboleth.net/confluence/display/OpenSAML/Home.
39.
J.C.Ramalho, A.Simões and L.Carriço (ed. lit.), XATA2007: XML: aplicações e tecnologias associadas: actas da Conferência Nacional, 5, Lisboa, 2007. [S.l.: s.n.], 2007, ISBN 978-972-99166-4-9. pp. 33–46.
40.
Schema.js, available at https://github.com/akidee/schema.js.
41.
L.Tan and N.Wang, Future Internet: The Internet of things, in: The Proceedings of 2010 3rd International Conference on Advanced Computer Theory and Engineering (ICACTE), Vol. 5, 2010, pp. 376–380.
42.
Telecom review. 2011. Importance of identity management in cloud. [Online]. Available at http://telecomreviewna.com/index.php?option=com_content&view=article&id=92:importance-of-identity-management-in-Cloud-computing&catid=37:november-december-2011-issue&Itemid=73.
43.
T.Tran and C.Wietfeld, Approaches for optimizing the performance of a mobile SAML-based emergency response system, Communication Networks Institute (CNI), Faculty of Electrical Engineering and Information Technology, Dortmund University of Technology, Germany.
44.
Tv4, available at http://geraintluff.github.com/tv4/.
45.
XML 1.0 specification produced by the W3C, available at http://www.w3.org/TR/2008/REC-xml-20081126/.
46.
Y.Zhang, M.Chen and R.X.Lai, Cloudified and software defined 5G networks: Architecture, solutions, and emerging applications, Mobile Netw Appl2016(21) (2016), 727–728. doi:10.1007/s11036-016-0762-0.
