Trust Management for User-Centric Identity Management on the Internet

In user-centric identity management, user select IDP. There is no relationship between the IDP and the relying web site. To evaluate the credential presented by a user and issued by the IDP, the relying web site has to decide to trust the issuer IDP. As the types of identity information provided by IDPs are various, it is very difficult for a TTP to gather and manage trust of all kinds of IDP. To solve this trust management problem, we propose reputation based trust management method. In our method, web sites that have experience of the IDP vote for the trust of the IDP. There is single TTP for aggregating the vote and transmitting the vote result to the relying web site. With this method, the relying web site can get the information for deciding trust of IDP that is unfamiliar to the web site.