An Approach to IdM with Privacy in the Cloud

Cloud computing allows the use of resources and systems in thousands of providers. This paradigm can use federated identity management to control user´s identification data, but it is essential to preserve privacy, while performing authentication and access control. This article discusses necessary characteristics to improve privacy in the dissemination of sensitive data of users in federated cloud computing paradigm. We plan to identify and use privacy techniques in identity management systems used in cloud. Users´ attributes should have associated policies to minimize release of data exchanged in the process. It is also necessary to deal with privacy in interactions between authentication and authorization processes. This paper presents an approach to address the issues involving privacy around the personally identifiable information. The proposed model allows control of users´ PII, provides some choices to assist users in data dissemination during the interaction and provides guarantees using user preferences on the SP side.