File(s) not publicly available

PRIMA: Privacy-Preserving Identity and Access Management at Internet-Scale

conference contribution
posted on 2023-11-29, 18:08 authored by Muhammad Rizwan Asghar, Michael BackesMichael Backes, Milivoj Simeonovski
The management of identities on the Internet has evolved from the traditional approach (where each service provider stores and manages identities) to a federated identity management system (where the identity management is delegated to a set of identity providers). On the one hand, federated identity ensures usability and provides economic benefits to service providers. On the other hand, it poses serious privacy threats to users as well as service providers. The current technology, which is prevalently deployed on the Internet, allows identity providers to track the user's behavior across a broad range of services. In this work, we propose PRIMA, a universal credential-based authentication system for supporting federated identity management in a privacy-preserving manner. Basically, PRIMA does not require any interaction between service providers and identity providers during the authentication process, thus preventing identity providers to profile users' behavior. Moreover, throughout the authentication process, PRIMA provides a mechanism for controlled disclosure of the users' private information. We have conducted comprehensive evaluations of the system to show the feasibility of our approach. Our performance analysis shows that an identity provider can process 1,426 to 3,332 requests per second when the key size is varied from 1024 to 2048-bit, respectively.


Preferred Citation

Muhammad Asghar, Michael Backes and Milivoj Simeonovski. PRIMA: Privacy-Preserving Identity and Access Management at Internet-Scale. In: IEEE International Conference on Communications (ICC). 2018.

Primary Research Area

  • Algorithmic Foundations and Cryptography

Name of Conference

IEEE International Conference on Communications (ICC)

Legacy Posted Date


Open Access Type

  • Unknown


@inproceedings{cispa_all_1427, title = "PRIMA: Privacy-Preserving Identity and Access Management at Internet-Scale", author = "Asghar, Muhammad Rizwan and Backes, Michael and Simeonovski, Milivoj", booktitle="{IEEE International Conference on Communications (ICC)}", year="2018", }

Usage metrics


    No categories selected


    Ref. manager