Abstract:Identity management (IdM) plays a significant role in managing user identities (IDs). However, IdM is challenging to handle the rapidly rising numerous kinds of Web-based applications nowadays. The OpenID 2.0 communication protocol is an improved solution for managing a user's IDs based on the OpenID URL identity. OpenID URL identity is not very much secure in specific Web-based attacks; for instance, session hijacking and phishing attacks often occur. The earlier OpenID-based methods secure OpenID URL identity with single, double, and triple authentication schemes. But Identity Provider (IdP) side is still not secure in Web attacks: if an attacker steals the IdP-side legal user information, then existing OpenID-based security techniques are unreliable. The anticipated OpenID Reverse Authentication Authorizing and Accounting (RAAA) user authentication-based protocol secured OpenID URL identity by providing two beneficial fields Secret Alphanumeric String (SAS) and Special Innovative PIN (SIP) that utilize in testing website both sides in reverse and cost-effective way. In this experiment, IdP and Relying Party (RP), both sides are being used secretly. Therefore, experimental websites also test to check the proposed triple authentication protocol. In this paper, we have compared our RAAA user authentication protocol with already available SSO protocol methods. The tested websites and comparative results represent that the anticipated design protocol is very much secure and reliable solution. The advanced cryptographic Single-Sign-On (SSO) secure protocol reduces the higher-level session hijacking and phishing attacks risk in an OpenID-based environment. We suggest future SSO protocol methods will be needed more in terms of the authorized user's identity authentication in Web-based applications.

Research And Implementation Of Single Sign-On Mechanism For Asp Pattern

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Construction of security architecture of web services based EAI

Design and Implementation of Unified Access Control System Based on LDAP

Inter-domain authentication scheme for Pervasive Computing Environments

Web Single Sign-On Authentication using SAML

A New SIP SSO Mechanism

Design And Implementation Of Social Networking Federation System

A research on multi-layer structure for dynamic service integration an innovative model based on SOA

The Design and Implementation of Message System-based and Customizable Single Sign out Service

Secure Information Exchange Model Between PDM Systems

Evaluation of Secure OpenID-Based RAAA User Authentication Protocol for Preventing Specific Web Attacks in Web Apps

Comparative Analysis and Framework Evaluating Web Single Sign-on Systems

SINGLE-SIGN-ON MODEL OF THE AUTHENTIC-NAME NETWORK SERVICES AND ITS IMPLEMENTATION

The Simple Object Access Protocol In Web Services Architecture

An Empirical Study of Security Issues in SSO Server-Side Implementations

Research on SOA-oriented and Single Sign-on based System Integration Technology

An Authentication and Authorization Solution Supporting SOA-based Distributed Systems

Design and Realization of Distributed SSO System Supporting Multi-mode Application

Improvement on SAML-based Single Sign-on Model

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES