{"id":"https://openalex.org/W4385713430","doi":"https://doi.org/10.1145/3600160.3600183","title":"Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities","display_name":"Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities","publication_year":2023,"publication_date":"2023-08-09","ids":{"openalex":"https://openalex.org/W4385713430","doi":"https://doi.org/10.1145/3600160.3600183"},"language":"en","primary_location":{"id":"doi:10.1145/3600160.3600183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600183","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600183","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091639114","display_name":"Amir Sharif","orcid":"https://orcid.org/0000-0001-6290-3588"},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Amir Sharif","raw_affiliation_strings":["Center for Cybersecurity, Fondazione Bruno Kessler, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6290-3588","affiliations":[{"raw_affiliation_string":"Center for Cybersecurity, Fondazione Bruno Kessler, Italy","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053457508","display_name":"Francesco Antonio Marino","orcid":"https://orcid.org/0000-0002-0308-0080"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Francesco Antonio Marino","raw_affiliation_strings":["Italian Government Printing Office and Mint, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0308-0080","affiliations":[{"raw_affiliation_string":"Italian Government Printing Office and Mint, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075120451","display_name":"Giada Sciarretta","orcid":"https://orcid.org/0000-0001-7567-4526"},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giada Sciarretta","raw_affiliation_strings":["Center for Cybersecurity, Fondazione Bruno Kessler, Italy"],"raw_orcid":"https://orcid.org/0000-0001-7567-4526","affiliations":[{"raw_affiliation_string":"Center for Cybersecurity, Fondazione Bruno Kessler, Italy","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101784414","display_name":"Giuseppe De Marco","orcid":"https://orcid.org/0000-0002-3108-592X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Giuseppe De Marco","raw_affiliation_strings":["Department for digital transformation, Italy"],"raw_orcid":"https://orcid.org/0000-0002-3108-592X","affiliations":[{"raw_affiliation_string":"Department for digital transformation, Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002818742","display_name":"Roberto Carbone","orcid":"https://orcid.org/0000-0003-2853-4269"},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Roberto Carbone","raw_affiliation_strings":["Center for Cybersecurity, Fondazione Bruno Kessler, Italy"],"raw_orcid":"https://orcid.org/0000-0003-2853-4269","affiliations":[{"raw_affiliation_string":"Center for Cybersecurity, Fondazione Bruno Kessler, Italy","institution_ids":["https://openalex.org/I2277624104"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047487115","display_name":"Silvio Ranise","orcid":"https://orcid.org/0000-0001-7269-9285"},"institutions":[{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]},{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Silvio Ranise","raw_affiliation_strings":["Center for Cybersecurity, Fondazione Bruno Kessler, Italy and University of Trento, Italy"],"raw_orcid":"https://orcid.org/0000-0001-7269-9285","affiliations":[{"raw_affiliation_string":"Center for Cybersecurity, Fondazione Bruno Kessler, Italy and University of Trento, Italy","institution_ids":["https://openalex.org/I193223587","https://openalex.org/I2277624104"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4346,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.58121372,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7463547587394714},{"id":"https://openalex.org/keywords/identity-management","display_name":"Identity management","score":0.6290901303291321},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.6272553205490112},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6209679841995239},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5863627791404724},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.5829517841339111},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.5769102573394775},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.5558223128318787},{"id":"https://openalex.org/keywords/digital-identity","display_name":"Digital identity","score":0.535747230052948},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.5034400820732117},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4690350294113159},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4110376834869385},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.27343684434890747},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.12741804122924805},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.11230573058128357}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7463547587394714},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.6290901303291321},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.6272553205490112},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6209679841995239},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5863627791404724},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.5829517841339111},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.5769102573394775},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.5558223128318787},{"id":"https://openalex.org/C2779813694","wikidata":"https://www.wikidata.org/wiki/Q528053","display_name":"Digital identity","level":3,"score":0.535747230052948},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.5034400820732117},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4690350294113159},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4110376834869385},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.27343684434890747},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.12741804122924805},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.11230573058128357},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3600160.3600183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600183","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3600160.3600183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600183","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G507880695","display_name":null,"funder_award_id":"PE00000014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385713430.pdf","grobid_xml":"https://content.openalex.org/works/W4385713430.grobid-xml"},"referenced_works_count":10,"referenced_works":["https://openalex.org/W2026991322","https://openalex.org/W2059768261","https://openalex.org/W2187511152","https://openalex.org/W2189431301","https://openalex.org/W2254160488","https://openalex.org/W2296912888","https://openalex.org/W2299259492","https://openalex.org/W2943233581","https://openalex.org/W2949166009","https://openalex.org/W3202064970"],"related_works":["https://openalex.org/W4308433763","https://openalex.org/W3035518953","https://openalex.org/W2898512050","https://openalex.org/W4386213623","https://openalex.org/W3110872243","https://openalex.org/W4236961386","https://openalex.org/W4377818785","https://openalex.org/W4385282342","https://openalex.org/W4246096667","https://openalex.org/W2625931504"],"abstract_inverted_index":{"An":[0],"Attribute":[1,82,102],"Authority":[2,83,103],"is":[3,40,56,149],"an":[4,65,73,101],"entity":[5,39],"responsible":[6],"for":[7,35,84,191],"establishing,":[8],"maintaining,":[9],"and":[10,19,127,140,188,195],"sharing":[11],"a":[12,196],"subject\u2019s":[13],"qualified":[14],"attributes,":[15],"such":[16],"as":[17,57],"titles":[18],"qualifications.":[20],"In":[21,28,97,165],"the":[22,29,48,59,77,81,85,107,112,116,133,146,153,170,192],"OpenID":[23,30,177],"Connect":[24,31,178],"digital":[25,32],"identity":[26,33,50,70],"ecosystem,":[27,34],"privacy":[36,128,189],"reasons,":[37],"this":[38,122,166],"distinct":[41],"from":[42],"Identity":[43,74],"Providers":[44],"that":[45],"manage":[46],"only":[47],"basic":[49],"profile":[51],"information.":[52],"A":[53],"relevant":[54],"scenario":[55,123],"follows:":[58],"User":[60,147,181],"first":[61],"logs":[62],"in":[63,131],"to":[64,94,115,136,179],"online":[66,78,117,154],"service":[67,79,155],"using":[68],"his/her":[69],"managed":[71],"by":[72],"Provider.":[75],"Then,":[76],"asks":[80],"additional":[86],"User\u2019s":[87,108,113],"attributes":[88,114],"(e.g.,":[89],"entitlements)":[90],"before":[91,110],"granting":[92],"access":[93],"its":[95],"resources.":[96],"some":[98],"high-sensitive":[99],"cases,":[100],"needs":[104],"proof":[105],"of":[106,121,145,172],"authentication":[109],"releasing":[111],"service.":[118],"The":[119],"challenge":[120],"involving":[124],"usability,":[125],"security,":[126],"requirements":[129],"lies":[130],"finding":[132],"right":[134],"mechanism":[135],"share":[137,180],"(the":[138],"minimum":[139],"necessary":[141],"set":[142],"of)":[143],"claims":[144,182],"who":[148],"currently":[150],"authenticated":[151],"with":[152],"across":[156,183],"multiple":[157],"domains":[158],"without":[159],"requiring":[160],"his":[161],"or":[162],"her":[163],"re-authentication.":[164],"paper,":[167],"we":[168],"present":[169],"design":[171],"two":[173,193],"solutions":[174,194],"based":[175],"on":[176],"domains.":[184],"We":[185],"provide":[186],"security":[187],"analysis":[190],"brief":[197],"comparison":[198],"between":[199],"them.":[200]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}