privilege federation between different user profiles for service federation
Service providers often incorporate services other than the main ones they offer for user convenience. Such service providers need to exchange personal attributes with other providers they interact with and link user accounts. Some service providers, however, can not federate the accounts, because the subject of them is not always same; for instance, one subject of an account is a user of a personal profile, and the other of another account is the one of a family profile. Thus a mechanism is needed to federate user profiles. To address this issue, we propose a privilege federation framework for personal attribute exchange between different user profiles. This framework enables the providers to exchange attributes based on identity federation established by privilege exchange. With it, they can determine what attributes to be exchanged with the privilege assertion and protect privacy information against leakage.
identity federation privilege management access control