Policies and Research in Identity Management

The world of the twenty-?rst century is, more than ever, global and impersonal. Criminal and terrorist threats, both physical and on the Internet, increase by the day. The demand for better methods of identi?cation is growing, not only in companies and organizations, but also in the world at large. Identity management is put under pressure, due to the growing number of frauds who want to hide their true identity. Identity management challenges the information security research community to focus on interdisciplinary and holistic approaches while retaining the bene?ts of previous research e?orts. As part of this tendency, surveillance and monitoring are more prominently present in society, both in the public and private domain. The original intention being to contribute to security and safety, surveillance and monitoring might, in some cases, have unintended or even contradictory e?ects. Besides, the - nipresence of surveillance and monitoring systems might be at daggers drawn with public and democratic liberties. In this context, IFIP (International Federation for Information Processing) Working Group 11.6 on Identity Management organized its second working c- ferenceonPoliciesandResearchinIdentityManagement(IDMAN2010)inOslo, Norway, November 18¿19, 2010. Papers o?ering research contributions focusing on identity management in general and surveillance and monitoring in parti- lar were solicited for submission. The submitted papers were in general of high quality. All papers were reviewed by two to ?ve members of the international ProgramCommittee. Nine of the submitted papers,whicharepublishedin these proceedings,were ?nally unanimously accepted for presentationby the Program Committee. WeareverygratefultotheNorwegiangovernmentforfundingthisconference.

State-of-the-art research

Policies and Research in Identity Management.- Mixing Identities with Ease.- Using CardSpace as a Password Manager.- Foreign Identities in the Austrian E-Government.- Understanding the Economics of Electronic Identity: Theoretical Approaches and Case Studies.- Profitable Investments Mitigating Privacy Risks.- A Security Analysis of OpenID.- Personal Federation Control with the Identity Dashboard.- The Plateau: Imitation Attack Resistance of Gait Biometrics.- Privacy-Friendly Incentives and Their Application to Wikipedia.- Policy Provisioning for Distributed Identity Management Systems.