Improved OpenID Authorization Registration Process
Chin Ling Chen, De-Kui Li, Tzay-Farn Shih, Yao Chung Chang · Applied Mechanics and Materials · 2015
Cloud technology has undergone significant and rapid growth in recent years, providing users with ever more Cloud resources. The services offered are based on users’ usage habits, so users come to rely ever more on Cloud applications. OpenID Union proposed an authorization method, allowing the authorized transfer of users’ personal data from one Cloud to another, using personal registration information. However, since providers do not protect users’ private information, attackers can easily intercept and tamper with confidential messages. In this paper, we use the characteristics of the blind signature to support user verification of the registering provider, to protect the user’s identity, and to address known vulnerabilities in the system.