Title: Framework for a secure digital identity management system

Authors: Opani Aweh; Stella Chinye Chiemeke

Addresses: Faculty of Physical Sciences, Department of Computer Science, University of Benin, Benin City, Nigeria ' Faculty of Physical Sciences, Department of Computer Science, University of Benin, Benin City, Nigeria

Abstract: This study evaluated the existing architectural framework supporting digital identity management systems applications design from the perspective of the rising incidence of sophisticated network attack mechanisms against these systems. The study focused on man-in-the-middle related network attacks vulnerabilities and the inability of these subsisting frameworks to support some other desirable security related features of mutual authentication and ample forensic evidence generation. The study adapted one of the subsisting frameworks to leverage global system of mobile communication (GSM) networks security features. A novel digital identity management system was then modelled and implemented on this adapted framework and an empirical testing and evaluation of this novel system was conducted to gauge how well the problems articulated were addressed. The results achieved demonstrated the adapted framework security against man-in-the-middle network credentials sniffing attacks, support for mutual authentication mechanism implementation and reliable forensic evidence generation.

Keywords: Cain and Abel; credentials; digital identity; framework; digital forensics; internet security; mutual authentication; network attacks; network security; identity management.

DOI: 10.1504/IJITST.2014.064512

International Journal of Internet Technology and Secured Transactions, 2014 Vol.5 No.2, pp.117 - 132

Received: 08 Mar 2014
Accepted: 26 Jun 2014

Published online: 10 Sep 2014 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article