Interoperation of authentication assurance level between different identity management systems

Identity management (IdM) is the basic element for operation of networking services and an important aspect of networking security. It is difficult to interoperate between different IdM systems directly because of different technologies and framework used in those systems. In this paper, we develop a framework that involves gateways that use a middle language - security assertion markup language (SAML) to convey authentication data, and implement AAL interoperation between IdM systems. The proposed framework does not only provide efficient solution for the interoperation of multi-IdM systems, but also can evidently strengthen the protection of personal private information.

I. Introduction

Generally, Identity is the basement of humans' social activity. With humans' activity expanding from physical space to visual space based on networking, the identity is also a vital function to networking activity [1]. On the other hand, collaboration among companies becomes more and more important. Commercial data should be protected from being accessed illegally. Companies can only allow other enterprises with legal identities to reach information based on authorization.