查看文章

We describe a federated identity management system that allows users to access organisational resources using their existing login accounts at social networking and other sites. Users are empowered to link their various login accounts together, so that they can swap between them. We utilise the Level of Assurance (LoA) concept to ensure the organisation’s site remains secure, and we allow users to escalate their login privileges by logging in via higher LoA accounts when necessary. The architectural design is described, followed by the implementation details, the performance test results, and the user trials we carried out. We conclude by discussing the limitations of the current system, where future R&D is still needed, and what some of the possible future uses might be.