A Proposed Cryptography-Based Identity Management Scheme for Enhancing Enterprise Information Systems Security

Abstract

Enterprises are faced with the challenges of managing users’ identity across multiple systems and applications.User identity usually includes personal information such as names, contact information, and demographic data;legal information which is the information about legal relationship between the enterprise and the user; and logincredentials to managed systems for identification and authentication such as login ID and password, PKI certificate,tokens, biometrics, and so on. As a result of these challenges, enterprises contend with problems of datainconsistency, repetition of access to multiple systems, security exposure, unreliability of data, complexity insystems usage, and difficulty in managing large data. These problems are compounded as enterprises deploy moreIT infrastructures (systems and applications) and have more users (employees, customers, partners, contractors,vendors, and so on).Our research is aimed at addressing these challenges by building on existing identitymanagement technologies through the creation of a hybrid technology using Identity Management andCryptographic techniques. We present the research direction in this paper.Keywords: Enterprises, Identity Management, Identity Management Technology, Cryptography