Evaluation Criteria for Future Identity Management

The importance of identity management grows hand in hand with online services. This growth presents demands to the current technologies that require new solutions and tools to satisfy. In order to enable these new approaches, comprehensive design and evaluation criteria for identity management systems are needed. This work proposes new design and evaluation criteria for future identity management system designs. These new criteria are achieved by first reviewing criteria presented in current literature and then proceeding to combine these to create a more comprehensive set of requirements. The resulting criteria were then successfully tested by evaluating the Shibboleth and OpenID approaches to identity management. This test also produced preliminary results on aspects of identity management that future systems should attempt to address such as trust management.