Identity and Access Management

Company data became more complicated and vulnerable with the increase in the number of users. In spite of company policies and procedures being implemented, it is still not enough to address the access control gaps stated in ISO 27002 Section 9. The access control gap that will be address in this research is Insider Threat particularly to mitigate Negligent Insider. Security experts identified Negligent Insider as the most prevalent IT security threat. There are different ways on how an employee can be considered as negligent. Gaining access to unauthorized data, data sabotage, and loss of company laptop is among them. As of 2014, there have been more than 4,000 breaches for nearly 1 billion records and these numbers grow daily. If not address properly, this can cost unnecessary expense and possible loss of client trust to an organization. Worst, it can even end up in bankruptcy.

The objective of this research is to address Negligent Insider by creating an Identity and Access Management (IAM) Framework having Risk based approach. This Framework will be aligned with ISO 27002 and will not aim to replace it. Instead, it will serve as supplementation to address Negligent Insider. In creating the output, Identity Framework (ISO/IEC 24760) will be mapped to Risk Management Framework (ISO/IEC 27005). From the mapping, an IAM Framework will then be created to serve as guide in addressing Negligent Insider. Upon the creation of an IAM Framework, the result of this research will be an added contribution in seeking ways on how Negligent Insider can be address in an organization to protect data integrity and provide cost efficient measures to the organization.

In this research-in-progress paper, we encourage information systems (IS) researchers to consider the self-sovereign identity (SSI) approach to identity management. We highlight several issues with current data practices, then provide an overview of SSI by discussing the technology and actors involved. Finally, we call for more IS research on SSI to ultimately increase its adoption.

The Cyber Community has published numerous Zero Trust Architecture (ZTA)  infographics, white papers, and possible solution papers.  INFOSECFORCE certainly applauds all these efforts.  The possible difference between many of these publications and this ZTA Strategy Outline is that this ZTA provides a possible battle plan for implementing a ZTA.  We based this document on the NIST Zero Trust Special Publication 800-207.

Please call us at 804-855-4988 if we can help.

The present communication proposes a digitally operative Unique Digital Identification Number leveraging the Distributed Ledger Technology. DLT is a protocol that allows secure functioning of a digital database that exists across several locations. It could be a Blockchain, DAG, Hashgraph, Holochain or Tempo (Radix). DLT backs up all information in a secure and accurate manner using cryptography.

The digital identity ecosystem can work seamlessly across administrative domain viz. educational sector, health-care, finance, telecommunications, crowd operations, public distribution, taxation, legal enforcement and others. The system assures privacy and trust, with least involvement of bureaucracy.

Key words: Blockchain, Citizen ID, DAG, Digital Identity, EPIC, Hashgraph, Holochain, Multipurpose ID, OCI, PAN, PIOC, Tempo, UID.

Organizations in both public and private sectors are realizing the value of identity and access management technology to address mission-critical needs and to ensure appropriate access to resources across heterogeneous technology environments, and to meet rigorous compliance requirements. A well-designed identity management system is fundamental to enabling better information sharing, enhancing privacy protection, and connecting the diverse web of public and private sector agencies involved in the delivery of today's public service. This article provides an overview of identity and access management literature. It attempts to analyze the business drivers, trends, issues and challenges associated with the implementation of such systems. It then presents a strategic framework and an overall ecosystem for the implementation of identity and access management system in different contexts of applications. It also introduces possible strategies and solutions for the development of a federated national identity infrastructure. It finally sheds light on a recent government implementation in the United Arab Emirates that was launched to develop a modern identity management infrastructure to enable digital identities and support their application in e-government and e-commerce context.

In this paper, we present the project denominated Efficient and Transparent Municipalities -MuNet, developed by the Organization of American States -OAS, with the sponsorship of the Canadian for International Development Agency -CIDA. The aim of this project was to help Latin-American municipalities to use ICT tools to improve efficiency and transparency in its activities. The project was developed between 2005 and 2006 in 22 municipalities distributed in 11 countries, with the support of 5 experts of 5 different nationalities. The first phase followed a diagnostic of the general situation of the municipality, including technological aspects, and also transparency perceptions. Then a proposal of strategy to apply electronic government was developed with the collaboration of a Consultancy Team and the Task Force defined by the Major in each municipality. Furthermore, all the participants in the project received a virtual course about fundamentals in electronic government strategies. With the document approved by the society and the political ambit the Consultancy Team accompanied the Task Force in the implementation process, using in some cases the technological support of the project, specifically with software applications to develop the WEB page of the municipality -MuniPortal -, another software -MuniCompra -to improve the buying process and a last one to support the creation of a one stop window for the municipality services -MuniServi -. Additionally, this paper also presents evidence of the implementation process and the general data about the diagnostics developed.

Studies have revealed intense competition over land in Chittagong Hill Tracts (CHT) of Bangladesh. This study examines land dispute processes within and between hill people (Chakma Community) and Bengali settlers (who migrated through government initiated settlement program in 1979-81) in CHT. By understanding property, identity and authority as relational; my study explores mutually constitutive processes between property and authority relations, and between property and identity relations. It investigates how property in land is claimed and defined in the context of dynamic authority relation in land control and multiple categorisations as well as claims for recognition of identities. By carrying out a historical analysis of state-making, I argue that CHT remains a frontier because of- the distinctive legal and administrative systems, non-recording and ambivalence in property system, ongoing processes of reconfiguration of institutional arrangements in land control and state’s territorial strategies to control population and space. The study employs an ethnographic approach and data are collected by engaging with disputants, institutional actors, academics, members of political organizations and civil society. Working across communities has enabled to encompass differences in narratives, practices, range of strategies and claims based on varied rules, sources of authority, history and identities. Dispute processes reveal that competing property claims are based on various norms (customary and statutory), varieties of land documents (formal and informal) and wide number of authority sources (formal and informal). Property rules (statutory and customary) are negotiated, continuously interpreted and reinterpreted through practices and claim-making. The study draws out various political constellation of institutions and authority relations that are formed through competition for authorising land relation. State institutions- bureaucratic, judiciary, regional government, traditional institutions, military authorities; and non-state authorities (political parties, leaders, brokers), all partake and compete in the process of constitution of property relation in ‘post’ conflict/mid conflict zone, suggesting that state-making or control over land/territory as an active and contested process.
The study finds that land contestations are evolving through contestation over dakhal i.e. physical or forceful occupation of land, which depends on local authority structure for endorsement, individual’s/disputant’s position in the local power structure, proximity of the army camp and people’s ability to exist on the ground by taking certain strategies and actions. The research findings show that identity formation and social positioning play significant roles in competition over land. Struggle over recognition of property in land is intricately linked to people’s struggle for recognition of certain identities. Religious identities of Chakmas (Buddhist) and Bengalis (Muslim) are increasingly becoming stronger and religious identities are mobilised in relation to contestation over land. The study provides an account of recurrent and interrelated processes of constitution of property, authority and identity relations in a frontier region, which has also been at the margin of the state historically. In the absence of tenure security, the existing stalemate situation regarding the formalisation process and non-recognition of customary land rights of hill people, it is crucial to understand existing land relations in order to plan and implement development policies, particularly those related to land and forest in CHT. My research has taken a novel approach in studying land conflicts by investigating the making of property, authority and identity relations in a contested territory. It contributes to existing knowledge regarding land relations and related processes of authority and identity formation in CHT, and in regions that can be characterised as frontiers or at the margin of the state.

The following paper explores the way transparency is used and applied, on a performative and symbolic level, as (1) a device for managing the establishment of sociocultural norms and values and (2) an expedient for understanding the boundaries between oneself and the other. A focus is given to the digital online and offline spaces, seen as places of visibility, circulation of information flows and open-data exchange. Drawing on cultural studies, semiotics and information studies, this interdisciplinary project aims to uncover values, rationales and theories behind the use and non-use of authenticity, truth and personality, in social decision-making and public participation. It will be taken account of the possible responsibilities connected to being transparent and visible, and it will be considered the social expectation for a perfect state, which a term like transparency is charged with, while trying to understand if a politics of total transparency is in opposition with democracy.

Mrežne barijere (engl. firewalls) koriste se za postavljanje kontrolnih tačaka bezbednosti na granicama privatnih mreža. U kontrolnim tačkama mrežna barijera ispituje sve pakete koji prolaze između privatne mreže i Interneta. U zavisnosti od toga da li paketi zadovoljavaju pravila definisana listama za kontrolu pristupa, mrežna barijera će dozvoliti ili zabraniti protok tog paketa. Mrežna barijera je filter na relaciji lokalna mreža-Internet. Mrežna barijera (engl. firewall

Governments and businesses alike are coming to understand that national and global economies should us the Internet as a medium for innovation and economic growth. A critical component that has been left to service providers to establish and manage is that of digital identities of online clients and customers. Lack of regulation and effective methods of management has resulted in greater concerns over privacy, security, and productivity in online environments, thus hindering the development and use of the full potential of the Internet. This paper attempts to explore the role of a government initiated digital identity management system in supporting the creation of a stronger digital economy. The author provides an overview of the identity management infrastructure development initiatives in Gulf Cooperation Council (GCC) countries and briefly examines their potential to revolutionize and transform existing economic models. The author argues that the new smart identity cards produced in these countries may serve as secure tokens that connect digital and physical identity, create trustworthy environments, and strengthen confidence in online transactions critical to the growth of the digital economy.

The emergence of Blockchain technology as the biggest innovations of the 21 st century, has given rise to new concepts of Identity Management to deal with the privacy and security challenges on the one hand, and to enhance the decentralization and user control in transactions on Blockchain infrastructures on the other hand. This paper investigates and gives analysis of the most popular Identity Management Systems using Blockchain: uPort, Sovrin, and ShoCard. It then evaluates them under a set of features of digital identity that characterizes the successful of an Identity Management solution. The result of the comparative analysis is presented in a concise way to allow readers to find out easily which systems satisfy what requirements in order to select the appropriate one to fit into a specific scenario.

Every year, millions of candidates submit their educational credentials worldwide for admissions or recruitments. An alarming ratio (almost 10%) of applicants, in every recruitment, fabricates their educational history or overstate their academic qualifications. To ensure the validity of credentials, documents are verified, which consumes time and human resources. The process of issue and verification of academic credentials can be made open and distributed through blockchain technology. At the same time, it can be made more secured and trusted by using Smart Contracts.

The Book contains a comprehensive overview of physical as well as digital identities. Taking into account the central, federated and self-sovereign models of digital identity, the self-sovereign model has been suggested for identification and access management leveraging blockchain technology.

Further, blockchain architecture and its key characteristics have been discussed in detail. Lastly, the working mechanism of blockchain enabled ID management, transactional procedures, irreversibility, persistency, applications and the challenges, which are likely to come in future, have been explained.

The UID system preserves personally identifiable information (PII) of millions of users on a centralized government database, supported by some legacy software, with numerous SPOF (single points of failures). Such a centralized system, containing PII, acts like a honey pot to hackers. In a country where 2/3rd of the vulnerable citizens, do not have a bank account, but own a smartphone, echoes the possibility of a mobile based digital identity solution. The blockchain technology, by virtue of its key features like decentralization, persistency, anonymity and auditability, emerges as the most promising one amongst all.

The blockchain technology, by virtue of its key features like decentralization, persistency, anonymity and auditability, would benefit citizens by allowing them to save time when accessing or providing their personal data and records. Instead of being required to show up to services in-person to produce a physical form of ID, users could be provided with a digital ID through a personal device, like smartphone, that can be shared with services conveniently and securely through a DLT.

This is my final thesis proposal document submitted to the College of Computer Studies of De La Salle University - Manila. The context of this paper is completely different from the one I have uploaded before that is why this is tagged as v.2.

This Thesis Proposal will discuss the plans which this research will follow in order to achieve the main objective which is to create Risk Management guidelines for the IT-BPO Industry that will address Negligent Insider in the risk based IAM Framework of Forrester Research.

Over the past decade, biometrics technology has evolved from a technology used primarily in forensics and a narrow scientific and technological field to an indispensable technology in public and private sectors ex¬panding into areas calling for advanced security. Biometric technologies provide high levels of security and reliability to address requirements related to identification and verification of personal identities. In light of the ever increasing requirements for robust identity management, biometrics industry is evolving to play a central role in shaping the future economy. This article provides a comprehensive overview of biometrics technologies, its functions, areas of application, related international standards, and recent advances in the field. The second part of the article looks at the application of biometrics in the government sector worldwide, and the emerging pivotal role of biometrics in consolidating the foundations of the digital economies and sheds light on the experiences of the United Arab Emirates in deploying different advanced biometrics technologies in a wide range of applications. It also outlines the government plans to develop an identity management infrastructure to address multiple strategic objectives, some of which are related to revolutionizing public services and supporting the development of the digital economy.

Identity verification is increasingly a legal obligation. There are many different laws and regulations that impose ‎on private-sector parties (either expressly or impliedly) a duty to identify persons with whom they ‎are dealing. ‎This paper examines the obligation generally and in the context of privacy and data security law and regulation.

We live in an information paradigm. The standard model of physics is being challenged and replaced by a data-centric probabilistic universe. It turns out that deterministic material reality is a subjective view of events, in the light of advances in quantum energy, fractals and chaos mathematics.

Automated industrial and personal computing applications are now completely pervasive in the fabric of human society in both the developed and developing world. And they are all built of blocks of data. We do have to evolve our concepts of data to understand that information technology is now a virtualization of information services, and networking connected devices of all kinds. It is comprised merely of bits of information, independent of wires, chips and electronic components, that over the next decade will probably be replaced by quantum computers of a very different physical design.

Recent heightened public awareness of protection of data privacy, triggered by electronic security failures, is an opportunity to redefine the view that data is merely an electronic representation of information. Security issues have raised the alarm, consequently we must track the data lifecycle more effectively.  The simplest solution may be to manage data holistically, from inception to end-of-life.
There is a clear requirement to standardise and categorise data in a way that we can continue to evolve our technology to meet the challenges of global information dissemination for exchange of scientific, humanitarian and world trade data. Advanced UML models and modelling technology is already being used for structured data terminologies.  An identity management domain incorporating blockchain as a class model serves to demonstrate that a platform independent model can easily extend any of the industry common information models to implement nexus identity management.

With the pandemic of COVID-19, people around the world increasingly work from home. Each natural person typically has several digital identities with different associated information. During the last years, various identity and access management approaches have gained attraction, helping for example to access other organization's services within trust boundaries. The resulting heterogeneity creates a high complexity to differentiate between these approaches and scenarios as participating entity; combining them is even harder. Last but not least, various actors have a different understanding or perspective of the terms, like "service", in this context. Our paper describes a reference service with standard components in generic federated identity management. This is utilized with modern Enterprise Architecture using the framework ArchiMate. The proposed universal federated identity management service model (FIMSM) is applied to describe various federated identity management scenarios in a generic service-oriented way. The presented reference design is approved in multiple aspects and is easily applicable in numerous scenarios.

Because of the economic and job market requirements, the Gulf Corporation Council (GCC) countries have acquired extremely high proportion of migrant workers in the world, and is considered as the third largest in the world after the European Union and North America. Supported by the expansion of the oil industry, the colossal influx of foreign residents and workforce led to the exacerbation of the demographic imbalance in the GCC countries. This had an enormous impact on the region‘s landscape both socially and economically. There are serious concerns among GCC countries about the stability of the national identity in light of the disproportionate population demographics. This paper touches upon the subject of the national identity in GCC countries, and present some recent statistics about the population demographics. It also presents one of the approaches followed by the GCC countries; namely, identity management systems, to allow their governments and policy makers develop and regulate their national identity strategies and the labour market.

The purpose of this article is to provide an overview of the PKI project initiated part of the UAE national ID card program. It primarily shows the operational model of the PKI implementation that is indented to integrate the federal government identity management infrastructure with e-government initiatives owners in the country. It also explicates the agreed structure of the major components in relation to key stakeholders; represented by federal and local e-government authorities, financial institutions, and other organizations in both public and private sectors. The content of this article is believed to clarify some of the misconceptions about PKI implementation in national ID schemes, and explain how the project is envisaged to encourage the diffusion of e-government services in the United Arab Emirates. The study concludes that governments in the Middle East region have the trust in PKI technology to support their e-government services and expanding outreach and population trust, if of course accompanied by comprehensive digital laws and policies.

wireless sensor network (WSN) is an unmistakable innovation for a long while. In most genuine applications, the immense measure of information assembled utilizing sensors are required to be put away and be made accessible for whenever, anyplace get to. However, WSNs are made out of asset obliged gadgets which absence of abilities to store gigantic lump of information and perform ensuing preparing of the information. WSNs can be increased by cloud condition which offers such administrations. Thus, a Sensor-Cloud structure is imagined in this proposition coordinating remote sensor connect with cloud condition. The coordinated system is appropriate for versatile and unavoidable figuring applications empowering Internet of Things (IoT) and planned to be utilized in genuine applications. Creating countries need proportionate social insurance conveyance answers for serve gigantic populace. This proposition features the issues identified with medicinal services conveyance that might be tended to utilizing the incorporated system. It might be utilized for empowering individuals, networks, medicinal services associations to gather and transmit wellbeing data as and when required so as to improve social insurance administrations for the provincial and urban populace. Inside the IoT empowered structure, few difficulties are recognized for examination. This theory stresses on difficulties including remote sensors and gives specialized answers for these difficulties. WSNs ordinarily work on IEEE 802.15.4 standard utilizing exclusive conventions which includes structure and the board unpredictability when combined with Internet. This postulation furnishes answer for coordinate sensor worldview with cloud condition which depends on Internet. Execution of 6LoWPAN based hubs empowers consistent correspondence over the systems including Internet. I.

Every person has his/her own identity. It’s important to manage a digital identity in a computer network,
with high priority. In spite of different applications we use in organization, resources need to be managed
and allotted to the appropriate user with proper access rights. Identity management or IdM refers to how
humans are identified, authorized and managed across computer networks. It covers issues such as how
users are given an identity, the protection of that identity and the technologies supporting that protection.
This paper attempts to provide an analysis to various identity management systems based on the state-ofthe-art
identity taxonomy factors.

El Gobierno Electrónico es un poderoso instrumento para la transformación del tradicional modelo de Estado burocrático hacia el de un moderno Estado proveedor de bienes y servicios.

La consolidación de un modelo de gestión digitalizado para un Estado moderno demanda replantear las formas y estructuras tecno-burocráticas existentes a fin de proveer a la solución de las demandas de la sociedad y dar respuestas sus funciones primarias.

Así, la interacción del Gobierno con los ciudadanos y el sector privado en forma electrónica fortalece una alianza orientada al cumplimiento de los objetivos esenciales del primero y beneficiando a los segundos mediante la obtención pronta, transparente y económica de más y mejores servicios.

Las evidencias internacionales muestran que los países de la región efectivamente han encontrado en el gobierno electrónico una oportunidad para acelerar los procesos de introducir y asegurar transparencia, estimular la búsqueda de la eficiencia y promover una mayor calidad de la gestión en las instituciones públicas. Estas misiones se alcanzan a través de estrategias basadas en proveer de amplio acceso a la información, la integración del comercio (a través de medios tradicionales al principio y luego los electrónicos), y brindando la oportunidad de aprender y educar aprovechando las economías de escala que ofrecen las redes de información.

Song, C. S., & Kim, Y.-K. (2021). Predictors of consumers’ willingness to share personal information with fashion sales robots. Journal of Retailing and Consumer Services, 63, 102727.

This study investigates whether consumers' self-interests and social interactions predict their willingness to share their personal information with a fashion sales robot. The study develops hypotheses based upon the information sharing theory and tests them by building a decision tree predictive model. Using a video stimulus of a fashion sales robot, we conduct interviews, pretests, and main data collection (n = 464) in the United States. The results indicate that service quality, enjoyment, and usefulness, which reflect self-interest, and trust, which reflects social interaction, predict consumers' willingness to share personal information with the robots. These results suggest that fashion marketers should focus strategically on service quality and enjoyment when they adopt AI sales robots and use them as a medium to share information in customer service.

This paper discusses one of the most significant challenges of next-generation big data (BD) federation platforms, namely, Hadoop access control. Privacy and security on a federation scale remain significant concerns among practitioners in both industry and academia. Hadoop's current primitive access control presents security concerns and limitations, such as the complexity of deployment and the consumption of resources. However, this major concern has not been a subject of intensive study in the literature. This paper critically reviews and investigates these security limitations and provides a framework called BD federation access broker to address 8 main security limitations. This paper proposes the federated access control reference model (FACRM) to formalize the design of secure BD solutions within the Apache Hadoop stack. Furthermore, this paper discusses the implementation of the access broker and its usefulness for security breach detection and digital forensics investigations. The efficiency of the proposed access broker has not sustainably affected the performance overhead. The experimental results show only 1% of each 100 MB read/write operation in a WebHDFS. Overall, the findings of the paper pave the way for a wide range of revolutionary and state-of-the-art enhancements and future trends within Hadoop stack security and privacy.

Für elektronische Geschäftstransaktionen von und zwischen Behörden wird ein Kennzeichen benötigt, ein so genannter Behördenidentifikator, der die beteiligten Behörden eindeutig identifiziert. Dieser Behördenidentifikator wird in einem Behördenverzeichnis mit weiteren Behördendaten geführt. Im Sinne von grenzüberschreitenden Geschäftstransaktionen müssen die eingesetzten Behördenidentifikatoren weltweit eindeutig sein. Die geforderte Interoperabilität legt die Verwendung eines Behördenidentifikators nahe, welcher auf internationalen Standards basiert. […]

A biosensor is a device that measures biological or chemical reactions by converting them into electrical signals. Biosensors are made up of a biological component, such as an enzyme, antibody, or cell, and a transducer that converts the biological response into an electrical signal. The signal can be electrical, optical, or thermal. The study aims to optimize sensitivity in capacitive bacterial biosensors using comsol multi-physics and MATLAB toolbox.

Abstract:
Throughout history, architecture has been the embodiment of the cultural ideals of human societies, and based on these ideals, the living environments created by different individuals have become a whole with its own identity. It appears that with the advent of modernism and the globalization of architecture, the concepts of architectural cultural identity have developed a changing and complex concept which is constantly challenged. Therefore, the present article intends to analyze and interpret the relationship between cultural-identity policies and the quality of residential environments. For this purpose, by selecting Ekbatan town of Tehran, as a sample, the quality of residential houses in phases 1 and 2 of this town has been assessed. The research method is based on hierarchical multivariate regression analysis and the model used in the analysis process is also called the experimental model of measuring the quality of the living environment. The desired socio-cultural is rated (we are between 1 and 5). The results of the studies indicate that the quality of the external environment of the residential complexes of Phase 1 (1> 62.62) and Phase 2 (1> 2.88> 5) of Ekbatan town is lower than average according to the socio-cultural identity. However, the quality of the indoor environment of residential units in accordance with the same principles is in good condition (Phase 1 (5> 08/04) and Phase 2 (5> 18/4> 1)). Also, both phases are similar and similar to each other in terms of observing the principles and criteria of socio-cultural identity.
Research aims:
1. To enlighten the relationship between cultural-identity categories and the quality of architectural space.
2. To study the cultural-identity policies in residential houses of phase 1 and 2 of Ekbatan town and to assess the quality of its residential houses.
Research questions:
1. What is the relationship between cultural-identity categories and the quality of architectural space?
2. How are the cultural-identity policies reflected in the residential houses of Phase 1 and 2 of Ekbatan town and what effects have they had on the quality of such houses?
Keywords:
Environmental Quality;  Identity-Cultural Policies;  Regression Analysis;  Hierarchical Multivariate;  Ekbatan Town.

Cloud computing is a major trend and a fast growing phenomena in the IT world. Organizations working in different sectors such as education or business are becoming more interested in moving their applications to the cloud to boost their infrastructure resources; increase their applications’ scalability and reduce costs. This boost in demand for cloud services led to the need for clouds to federate, in order to flawlessly deliver the required computation power and other services. In addition, there is major trend in delegating identity management tasks to identity providers in order to reduce cost. Managing identity and access control across different domains is a challenge. This paper proposes a framework for managing identity in federated clouds based on the use of a Security Assertion Markup Language (SAML) Agent. The agent acts as an interface for a cloud identity manager where it sends and receives identity assertion requests from and to other clouds in the federation. In addition, the agent assigns roles to users using identity attributes received in assertions and cloud’s internal role mapping rules. For testing the agent’s capability to scale and sustain load, a prototype implementation was developed. Performance evaluation results demonstrate the viability of the proposed framework.

Increasing growth of new technologies and new technological solutions follow increasing demand for new business. The increased usage of new technologies and the higher uses' awareness of the potential problems they bring along have resulted with the need to establish trust in these new services. By services the authors specifically mean Infrastructure-as-a-Service (IaaS) cloud services. The trust can be established in a number of ways such as through the implementation of relevant archival standards, principles of trusted digital repositories, applying to legal procedures, careful service implementation planning etc. In this article the authors focus on the research of the problems and critical points of cloud services, especially paying attention to the areas of governance, compliance, trust, architecture, identity and access management, software isolation, data protection, availability, and incident response.

Standards and infrastructure pose both theoretical and empirical challenges for digital government scholarship. For their part, scholars of standards and infrastructure have tended to neglect digital government development and public administration more generally as interesting sites of standards work. This paper addresses this gap, bringing concepts and methods from the sociology of standards and infrastructure to bear on the practice of digital government development in Thailand. We analyze efforts at IT-related information and service standardization in the Thai public sector, and describe a series of sociotechnical tensions and challenges that have faced, and sometimes stalled, efforts at digital government development.

Several countries have invested in building their identity management systems to equip citizens with infrastructures and tools to benefit from e-services. However, current systems still lack the interoperability requirement, which is the core issue that could lower the wide benefits of having an identity management system. In fact, in the existing systems, the user is allowed to choose only one partial identity from an identity provider (IdP) during a single session with a service provider (SP). However, in some scenarios, an SP needs to retrieve information about user's identities managed by multiple IdPs. The potential method to tackle these shortcomings is attribute aggregation from multiple identity providers. A number of initiatives and projects on attribute aggregation have been explored. Nevertheless, these constructions do not fulfill some identity management requirements. This paper describes a new flexible model that aims to provide the necessary mechanisms to ensure attribute aggregation in order to meet the interoperability challenges of current identity management systems. The proposed scheme is a scalable solution, based on identity federation technologies, that introduces a new IdP called an account linking provider (ALP). The purpose of this ALP is to link together different accounts, holding end users' attributes, whenever more than one source of data is needed to grant access to the requested web resource in a single session. Furthermore, the proposed identity federation system is based on a streamlined, cost-effective, and interoperable architecture, which makes this model suitable for large-scale identity federation environments.