A Trustworthy Identity Management Architecture for e-Government Processes

The frequent developments in the field of information and communication technologies (ICT) impel the governments around the world to provide online services to facilitate the citizens. The gentle move of the governments from traditional approaches of providing services towards online interaction with the citizens bring along additional challenges. Some of these challenges like uniquely identifying citizens and authenticating them before providing services are well realized. However, as private credentials of citizens are exchanged between different organizations for rendering different services the integrity of the platforms on these organizations also needs to be verified. This ensures that the user´s credentials will not be compromised. Trusted Computing Group (TCG) has defined an open set of specifications for the establishment of trustworthiness among different participants through a hardware root-of-trust. In this paper we present an identity management architecture for e-government processes, which incorporates measuring the integrity of the service provider and identity provider. The integrity measurement provides a mechanism for establishment of trust on these platforms.