A Design Towards Personally Identifiable Information Control and Awareness in OpenID Connect Identity Providers

Cloud computing usage has increased in recent years as a consequence of its benefits such as agility on resource provisioning, elasticity, and reduced costs. However, once organizations migrate to cloud environments they lose control of the underlying structure of their applications such as physical networking, storage, and servers. Therefore, the cloud may pose privacy threats to sensitive data that are used to identify users; hence, data stored in identity providers that are deployed on cloud platforms may be accessed by curious/malicious system administrators. We present a design that addresses some privacy issues within the personally identifiable information that is stored in identity providers of federated identity management systems. Further, we provide an overview of the addition of the proposed design into the MITREid OpenID Connect implementation developed by MIT.