Towards a User-Centric Identity-Usage Monitoring System

The misuse of identity-related information in cyberspace is one of the biggest concerns among all Internet users. So far several technologies have been proposed and implemented to prevent and detect identity theft and misuse, but none of them are completely successful in terms of privacy, user-centricity and generality. In this paper, we identify the requirements for a user-centric identity-usage monitoring system to solve such problems and propose a monitoring system that runs on a trusted third party. This system can transparently use context information of a request to detect anomalous use of online identity. Finally, we provide a prototypical implementation in an OpenID setting and evaluate it in terms of scalability, performance, user-centricity, and security.