Work

Bridging the Gap: Managing Dual Assurance Levels in OpenID Connect

Year: 2024

Type: conference-paper

Abstract: This paper introduces and addresses challenges in managing electronic identity’s Level of Assurance (LoA), which has two types: LoA of authentication and LoA of identity. We explore different technical specifications, protocols, and concrete identity providers’ strategies for managing these two levels of assurance, highlighting the implications of protocols supporting only a single LoA instead of two. An extension to the OpenID Connect protocol is proposed to support both LoA types, instituting a new claim, the Identity Context Class Reference (ICR). This approach ensures compatibility and versatility with existing technical specifications.

DOI: 10.5753/sbseg_estendido.2024.243389

Authors: Brendon Vicente R. Silva, Frederico Schardong, Ricardo F. Custódio

Institutions: Universidade Federal de Santa Catarina, Polydoro Ernani de São Thiago University Hospital

Language: English

Topic: User Authentication and Security Systems

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: gold

OpenAlex ID: W4402859623

FWCI:

Cites: 7

Cited by:

Related to: 10