Publications - Pervasive Computing Laboratory

Access control anomaly detection anotacionsemantica authentication Cloud computing coap compromise cryptography cynamon emadrid emrisco home network I-Shaper identity management inrisco inteligenciafuentesabiertas Internet of Things IoT magos Pervasive computing privacy Protection Protocols Qursa raudo2 Security Smart Card Trust management Ubisec VANETs 
Show all
2012
 Sánchez-Guerrero, Rosa;  Almenárez, Florina;  Díaz-Sánchez, Daniel;  Marín, Andrés;  Arias, Patricia;  Sanvido, Fabio
An Event Driven Hybrid Identity Management Approach to Privacy Enhanced e-Health Journal Article 
In: Sensors , vol. 12, iss. 5, pp. 6129-6154, 2012, ISSN: 1424-8220.
Abstract | Links | BibTeX | Tags: delegation, event, federation, health care, identity management, privacy, revocation consent, servicioseguridad, theory queue, user-centric
@article{sanchezguerrero001,

title = {An Event Driven Hybrid Identity Management Approach to Privacy Enhanced e-Health},

author = {Rosa Sánchez-Guerrero and Florina Almenárez and Daniel Díaz-Sánchez and Andrés Marín and Patricia Arias and Fabio Sanvido

},

url = {https://www.mdpi.com/1424-8220/12/5/6129

https://www.mdpi.com/1424-8220/12/5/6129/pdf?version=1403317529},

doi = {https://doi.org/10.3390/s120506129},

issn = {1424-8220},

year  = {2012},

date = {2012-05-10},

urldate = {2012-05-10},

journal = {Sensors },

volume = {12},

issue = {5},

pages = {6129-6154},

abstract = {Credential-based authorization offers interesting advantages for ubiquitous scenarios involving limited devices such as sensors and personal mobile equipment: the verification can be done locally; it offers a more reduced computational cost than its competitors for issuing, storing, and verification; and it naturally supports rights delegation. The main drawback is the revocation of rights. Revocation requires handling potentially large revocation lists, or using protocols to check the revocation status, bringing extra communication costs not acceptable for sensors and other limited devices. Moreover, the effective revocation consent—considered as a privacy rule in sensitive scenarios—has not been fully addressed. This paper proposes an event-based mechanism empowering a new concept, the sleepyhead credentials, which allows to substitute time constraints and explicit revocation by activating and deactivating authorization rights according to events. Our approach is to integrate this concept in IdM systems in a hybrid model supporting delegation, which can be an interesting alternative for scenarios where revocation of consent and user privacy are critical. The delegation includes a SAML compliant protocol, which we have validated through a proof-of-concept implementation. This article also explains the mathematical model describing the event-based model and offers estimations of the overhead introduced by the system. The paper focus on health care scenarios, where we show the flexibility of the proposed event-based user consent revocation mechanism.},

keywords = {delegation, event, federation, health care, identity management, privacy, revocation consent, servicioseguridad, theory queue, user-centric},

pubstate = {published},

tppubtype = {article}

}

Close
Credential-based authorization offers interesting advantages for ubiquitous scenarios involving limited devices such as sensors and personal mobile equipment: the verification can be done locally; it offers a more reduced computational cost than its competitors for issuing, storing, and verification; and it naturally supports rights delegation. The main drawback is the revocation of rights. Revocation requires handling potentially large revocation lists, or using protocols to check the revocation status, bringing extra communication costs not acceptable for sensors and other limited devices. Moreover, the effective revocation consent—considered as a privacy rule in sensitive scenarios—has not been fully addressed. This paper proposes an event-based mechanism empowering a new concept, the sleepyhead credentials, which allows to substitute time constraints and explicit revocation by activating and deactivating authorization rights according to events. Our approach is to integrate this concept in IdM systems in a hybrid model supporting delegation, which can be an interesting alternative for scenarios where revocation of consent and user privacy are critical. The delegation includes a SAML compliant protocol, which we have validated through a proof-of-concept implementation. This article also explains the mathematical model describing the event-based model and offers estimations of the overhead introduced by the system. The paper focus on health care scenarios, where we show the flexibility of the proposed event-based user consent revocation mechanism.
Close
https://www.mdpi.com/1424-8220/12/5/6129
https://www.mdpi.com/1424-8220/12/5/6129/pdf?version=1403317529
doi:https://doi.org/10.3390/s120506129
Close
2011
 Sánchez-Guerrero, Rosa;  Díaz-Sánchez, Daniel;  Marín-López, Andrés;  Arias-Cabarcos, Patricia;  Almenares-Mendoza, Florina
Improving privacy in identity management systems for health care scenarios Proceedings Article 
In: Proceedings of the 5th International Symposium of Ubiquitous Computing and Ambient Intelligence (UCAMI 2011), December 5-8th, 2011, Riviera Maya, Mexico, UCAMI, 2011, ISBN: 978-84-694-9677-0.
Abstract | Links | BibTeX | Tags: anonymity, delegation, desarrollodespliegue, federation, health care, identity management, privacy, Pseudonymity, user-centric
@inproceedings{pa033,

title = {Improving privacy in identity management systems for health care scenarios},

author = {Rosa Sánchez-Guerrero and Daniel Díaz-Sánchez and Andrés Marín-López and Patricia Arias-Cabarcos and Florina Almenares-Mendoza},

url = {http://hdl.handle.net/10016/13102},

isbn = {978-84-694-9677-0},

year  = {2011},

date = {2011-12-27},

urldate = {2011-12-27},

booktitle = {Proceedings of the 5th International Symposium of Ubiquitous Computing and Ambient Intelligence (UCAMI 2011), December 5-8th, 2011, Riviera Maya, Mexico},

publisher = {UCAMI},

abstract = {Privacy is a very complex and subjective concept with different meaning to different people. The meaning depends on the context. Moreover, privacy is close to the user information and thus, present in any ubiquitous computing scenario. In the context of identity management (IdM), privacy is gaining more importance since IdM systems deal with services that requires sharing attributes belonging to users’ identity with different entities across domains. Consequently, privacy is a fundamental aspect to be addressed by IdM to protect the exchange of user attributes between services and identity providers across different networks and security domains in pervasive computing. However, problems such as the effective revocation consent, have not been fully addressed. Furthermore, privacy depends heavily on users and applications requiring some degree of flexibility. This paper analyzes the main current identity models, as well as the privacy support presented by the identity management frameworks. After the main limitations are identified, we propose a delegation protocol for the SAML standard in order to enhance the revocation consent within healthcare scenarios.},

keywords = {anonymity, delegation, desarrollodespliegue, federation, health care, identity management, privacy, Pseudonymity, user-centric},

pubstate = {published},

tppubtype = {inproceedings}

}

Close
Privacy is a very complex and subjective concept with different meaning to different people. The meaning depends on the context. Moreover, privacy is close to the user information and thus, present in any ubiquitous computing scenario. In the context of identity management (IdM), privacy is gaining more importance since IdM systems deal with services that requires sharing attributes belonging to users’ identity with different entities across domains. Consequently, privacy is a fundamental aspect to be addressed by IdM to protect the exchange of user attributes between services and identity providers across different networks and security domains in pervasive computing. However, problems such as the effective revocation consent, have not been fully addressed. Furthermore, privacy depends heavily on users and applications requiring some degree of flexibility. This paper analyzes the main current identity models, as well as the privacy support presented by the identity management frameworks. After the main limitations are identified, we propose a delegation protocol for the SAML standard in order to enhance the revocation consent within healthcare scenarios.
Close
http://hdl.handle.net/10016/13102
Close