cybersecurity through an identity strongmanagementstrong system.pdfVIP

1 Cybersecurity through an Identity Management System Elli Androulaki, Maritza Johnson, Binh Vo and Steven Bellovin elli, maritzaj, binh, smb@cs.columbia.edu Abstract— merits (or the lack thereof) of such a scheme; those interested Cybersecurity is a concern of growing importance as internet in some of the issues should consult [KM02]. (A broader usage continues to spread into new areas. Strong authentication critique of the report may be found in [B08].) That said, if combined with accountability is a powerful measure towards indi- viduals’ protection against any type of identity theft. On the other the report’s caveat — “consistent with protecting privacy and hand, such strong identification raises privacy concerns. In this civil liberties” — is to be met, we need to define the privacy paper, we argue that authentication, accountability and privacy requirements of such a system. That is the purpose of this can be combined into a single, deployable identity management paper. system which can be adopted to current citizenship database infrastructures. More specifically, we present the properties that such a system would need in order to meet the applications of A. Criteria current infrastructures, aid in general operations of day to day Cybersecurity vs. Authentication. Cybersecurity aims life, and take into consideration the privacy of individuals. to provide a combination of confidentiality, integrity and