Information Sharing and User Privacy in the Third-Party Identity Management Landscape - ICT Systems Security and Privacy Protection Access content directly
Conference Papers Year : 2015

Information Sharing and User Privacy in the Third-Party Identity Management Landscape

Anna Vapen
  • Function : Author
  • PersonId : 986135
Niklas Carlsson
  • Function : Author
  • PersonId : 986136
Anirban Mahanti
  • Function : Author
  • PersonId : 986137
Nahid Shahmehri
  • Function : Author
  • PersonId : 986138

Abstract

The cross-site information sharing and authorized actions of third-party identity management can have significant privacy implications for the users. In this paper, we use a combination of manual analysis of identified third-party identity management relationships and targeted case studies to (i) capture how the protocol usage and third-party selection is changing, (ii) profile what information is requested to be shared (and actions to be performed) between websites, and (iii) identify privacy issues and practical problems that occur when using multiple accounts (associated with these services). By characterizing and quantifying the third-party relationships based on their cross-site information sharing, the study highlights differences in the privacy leakage risks associated with different classes of websites, and provides concrete evidence for how the privacy risks are increasing. For example, many news and file/video-sharing sites ask users to authorize the site to post information to the third-party website. We also observe a general increase in the breadth of information that is shared across websites, and find that due to usage of multiple third-party websites, in many cases, the user can lose (at least) partial control over which identities they can merge/relate and the information that is shared/posted on their behalf.
Fichier principal
Vignette du fichier
337885_1_En_12_Chapter.pdf (4 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01345104 , version 1 (13-07-2016)

Licence

Attribution

Identifiers

Cite

Anna Vapen, Niklas Carlsson, Anirban Mahanti, Nahid Shahmehri. Information Sharing and User Privacy in the Third-Party Identity Management Landscape. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. pp.174-188, ⟨10.1007/978-3-319-18467-8_12⟩. ⟨hal-01345104⟩
65 View
108 Download

Altmetric

Share

Gmail Facebook X LinkedIn More