Privacy-preserving Infrastructure for. Social Identity Management

Transcription

1 Privacy-preserving Infrastructure for Social Identity Management Dissertation zur Erlangung des Grades eines Doktors der Wirtschaftswissenschaften (Dr. rer. pol.) eingereicht an der Fakultät für Wirtschaftswissenschaften der Universität Regensburg vorgelegt von Michael Netter Berichterstatter: Prof. Dr. Günther Pernul Prof. Dr. Guido Schrycu Tag der Disputation: 25. Juli 2013

2 Berichte aus der Wirtschaftsinformatik Michael Netter Privacy-preserving Infrastructure for Social Identity Management Shaker Verlag Aachen 2013

3 Contents 1 Introduction Motivation and Background Research Questions Research Methodology IS Research Paradigms Design Science Design Research Process Research Overview Chapter Structure List of Publications 15 1 Fundamentals 17 2 Social Web Web Social Software Characteristics and Existing Challenges The PADGETS Project Concept. Methodology, and Platform Security and Privacy as a Major Focus Social Network Sites Defining Social Network Sites Evolution of SNSs in Practice and Research SNS Characteristics SNS Architectures SNS Stakeholders SNSs in the Context of this Work 35 3 Privacy Privacy Paradigms Legal Perspective 39 Michael Netter, 2013 Dissertation

4 3 1 2 Irrhliical Perspective 4Q A 1 A SKCI.II Perspective P11 \ a c \ Ad\i isaiies 41 \ 2 1 SNS Service Providers 41 i 2 2 SNS l'srrs 42 A it i'l i Va< \ Object i Vc* 42 X 3. 1 Au.ut'iirss ('KHI ml liamewmk t«u SNS Privacy 44 A. 1.1 Privacy Prote< tion Sirategies from the Viewpoint of SNS Users 44 i l l. I Privacy Protection Against Other SXS Users Privacy Protection Against SNS Service Providers.. 46.'i l l? Flamini; Privacy for this Work 47 I Identity Management Digital Identity Management Basic Building Blocks of Identities 'J Identity Models 'i IdM Fund ions and Technologies 53 I.I. I MM Types Social Identity Management Theoretical Foundations of SIdM SIdM Concepts on SXSs Identity Management on SNSs Relationship Management on SNSs Access Management on SNSs Context on SXSs 68 II Requirement Elicitation and Related Work 71 5 Requirements for a Privacy-preserving SIdM Infrastructure Requirement Elicitation Identity Management Requirements Relationship Management Requirements Access Management Requirements Infrastructural Requirements Literature Review and Comparision Methodology Input Processing Output 80 Dissertation Michael Netter, 2013

5 5.2.2 Results of the Comparison Limitations Identity Management Shortcomings Relationship Management Shortcomings Access Management Shortcomings Infrastructural Shortcomings 83 6 Impact of SNS-mediated Communication on SIdM Visibility Dimensions and Information Sharing Domains Default Information Spreading Active Information Sharing Past Information Availability Conception and Design of the Study Setup Phase Default Information Spreading Questionnaire Active Information Sharing Questionnaire Past Information Availability Questionnaire Results of the Study Demographics and Data Statistics Default Information Spreading Active Information Sharing Past Information Availability Discussion of Results 100 III Proposed Privacy-preserving Social Identity Management Infrastructure Privacy-preserving SIdM Fundamentals and Concepts Information Systems Improvement Theoretical Considerations Principles Pillars of a PPSIdM Infrastructure Autonomous and User-controlled Environment SIdM Tools Ill 7.3 SIdM Process Model Identity Management Process Relationship Management Process Access Management Process Translation Process SNS Integration Process 117 Michael Netter, 2013 Dissertation

6 8 Privacy-preserving SIdM Infrastructure 119 ^ I ( herview 119 V2 PPSIdM Provider Characteristics 122 V2.I FRI.-ba.sed Identities 122 V2.2 Contart Authentication and Authorization 123 V2.3 SNS Integration Concept 125 VI?. I SNS Integration Workflow 126 v2."> Summary 126 v3 Identity Facet Manager Component 128 S.X.I Design Principles 128 V.Ì.2 Stanis Quo 129 V3..3 A (ìeneric Model for Social Identity Representation 130 V3.1 Summary 132 V 1 Assisted Audiences Component 132 V l.l Data Analysis Fundamentals 133 V1/2 Import 136 VI.3 Clustering 136 V Relationship-based Assisted Audiences 136 V Access Policy-based Assisted Audiences 139 S Combining Both Approaches 141 V 1.1 Manual Refinement 142 Vl.-"j Summary 142 S.:> CA-RBAC Component Status Quo Dynamic and Context-aware Access Control Conceptualization of Context on SNSs Defining Contextual Constraints Conceptual Overview of CA-RBAC Example of Sharing of Personal Information using CA-RBAC Summary Access Policy Visualization Component Status Quo and Current Challenges Theoretical Considerations Information Visualization Access Control Policy Visualization Disclosure Browser Access Policy Grid Summary 159 Dissertation Michael Netter. 2013

7 v 9 Prototype Architectural Overview User Interface Components Identity Facet Manager Assisted Audiences CA-RBAC Access Policy Visualization Web Services Browser Plugin 170 IV Evaluation and Conclusions Evaluation Scenario-based Evaluation Identity Facet and Attribute Management Relationship Management Access Management Translation Phase Intra-Identity Facet Review Inter-Identity Facet Review Existing SNS Landscape Integration CA-RBAC Evaluation from the Perspective of Contacts Requirements Framework Comparison Conclusions 205 Appendices 209 A AX Schema Attribute Types 211 B OAuth Application Scenario Responses 215 Bibliography 217 Michael Netter, 2013 Dissertati on