Design and Implementation of a Functional Extension Framework for Authn & Authz Federation Infrastructure Using Web Browser Add-on

GakuNin is a federation for constructing an academic authn & authz infrastructure by using single sign-on (SSO) technology in Japan and it consists of academic eresource providers and consumers, e.g. Universities, Electric Journal Publishers and so on. The expansion of SSO target systems causes several issues in its infrastructure. In this paper, we focus on the issues, (1) rapidly increasing the importance of the user credential at the identity provider, (2) its phishing risk at service providers and (3) the difficulty of choosing own identity provider from the large number of federated providers. We propose a framework to solve the problems using web browser add-on. We have implemented a prototype of the framework. We also discuss the issues in the current implementation.