Trust negotiation in identity management

The significance of federated identity management system (IdM) for protection of user information, is discussed. Federated identity management system provides a group or organizations, mechanisms for managing and gaining access to user identity information. IdM systems involve two types of entities: identity providers and service providers. An IdP manages user authentication and user-identity-relevant information while service provider (SP) of system specifies and enforces the access-control policies for protection of user information resources. The IdM system provide the user information needed to satisfy the requesting SP's access-control policies using differentiated privacy preferences of user to protect user information. IdM technology and automated trust-negotiation (ATN) techniques establish trust between negotiating parties online through bilateral credential disclosure for protection of user information.