{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:35:53Z","timestamp":1760243753574,"version":"build-2065373602"},"reference-count":23,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2012,11,19]],"date-time":"2012-11-19T00:00:00Z","timestamp":1353283200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Cost reduction and a vastly increased potential to create new services, such as via the proliferation of the Cloud, have led to many more players and \u201cend points\u201d. With many of them being new entrants, possibly short-lived, the question of how to handle trust and privacy in this new context arises. In this paper, we specifically look at the underlying infrastructure that connects end-points served by these players, which is an essential part of the overall architecture to enable trust and privacy. We present an enhanced architecture that allows real people, objects and services to reliably interact via an infrastructure providing assured levels of trust.<\/jats:p>","DOI":"10.3390\/fi4041016","type":"journal-article","created":{"date-parts":[[2012,11,19]],"date-time":"2012-11-19T11:02:08Z","timestamp":1353322928000},"page":"1016-1025","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Supporting Trust and Privacy with an Identity-Enabled Architecture"],"prefix":"10.3390","volume":"4","author":[{"given":"Amardeo","family":"Sarma","sequence":"first","affiliation":[{"name":"NEC Laboratories Europe, Kurf\u00fcrstenanlage 36, 69115 Heidelberg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joao","family":"Girao","sequence":"additional","affiliation":[{"name":"NEC Laboratories Europe, Kurf\u00fcrstenanlage 36, 69115 Heidelberg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2012,11,19]]},"reference":[{"unstructured":"SWIFT Project. Available online:http:\/\/www.ist-swift.org.","key":"ref_1"},{"unstructured":"Daidalos Project. Available online:http:\/\/www.ist-daidalos.org.","key":"ref_2"},{"unstructured":"Srisuresh, P., and Holdrege, M. IP Network Address Translator (NAT) Terminology and Considerations. Available online:http:\/\/tools.ietf.org\/html\/rfc2663.","key":"ref_3"},{"unstructured":"Moskowitz, R., and Nikander, P. Host Identity Protocol (HIP) Architecture. Available online:http:\/\/tools.ietf.org\/html\/draft-ietf-hip-rfc4423-bis-04.","key":"ref_4"},{"doi-asserted-by":"crossref","unstructured":"Ahlgren, B., Arkko, J., Eggert, L., and Rajahalme, J. (2006, January 23\u201329). A Node Identity Internetworking Architecture. Proceedings of 25th IEEE International Conference on Computer Communications, Orlando, FL, USA.","key":"ref_5","DOI":"10.1109\/INFOCOM.2006.51"},{"unstructured":"Paul, S., Jain, R., and Bowman, M. A Vision of the Next Generation Internet: A Policy Oriented Perspective, British Computer Society International Conference on Visions of Computer Science. Available online:http:\/\/www.cs.wustl.edu\/~jain\/papers\/ftp\/bcs08.pdf.","key":"ref_6"},{"unstructured":"Pan, J., Paul, S., and Jain, R. (December, January 30). MILSA: A Mobility and Multihoming Supporting Identifier Locator Split Architecture for Naming in the Next Generation Internet. Proceedings of Global Telecommunications Conference, New Orleans, LA, USA.","key":"ref_7"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1145\/774763.774765","article-title":"From protocol stack to protocol heap: Role-based architecture","volume":"33","author":"Braden","year":"2002","journal-title":"ACM SIGCOMM Compt. Commun. Rev."},{"doi-asserted-by":"crossref","unstructured":"Jacobson, V., Smetters, D.K., Thornton, J.D., Plass, M.F., Briggs, N., and Braynard, R. (2009, January 1\u20134). Networking Named Content. Proceedings of Fifth ACM International Conference on Emerging Networking EXperiments and Technologies, Rome, Italy.","key":"ref_9","DOI":"10.1145\/1658939.1658941"},{"doi-asserted-by":"crossref","unstructured":"Ahlgren, B., D\u2019Ambrosio, M., Dannewitz, C., Marchisio, M., Marsh, I., Ohlman, B., Pentikousis, K., Rembarz, R., Strandberg, O., and Vercellone, V. (2008, January 9\u201312). Design Considerations for a Network of Information. Proceedings of ACM International Conference on Emerging Networking EXperiments and Technologies, Madrid, Spain.","key":"ref_10","DOI":"10.1145\/1544012.1544078"},{"unstructured":"(2009). Baseline Capabilities for Enhanced Global Identity Management Trust and Interoperability.","key":"ref_11"},{"unstructured":"NGN Identity Management Framework. Available online:http:\/\/www.itu.int\/rec\/T-REC-Y.2720-200901-I.","key":"ref_12"},{"unstructured":"OASIS SAML 2.0 profile of XACMLv2.0. Available online:https:\/\/www.oasis-open.org\/committees\/download.php\/24681\/xacml-profile-saml2.0-v2-spec-wd-5-en.pdf.","key":"ref_13"},{"unstructured":"Liberty Alliance Project. Available online:http:\/\/www.projectliberty.org\/specifications__1.","key":"ref_14"},{"unstructured":"Nanda, A., and Jones, M.B. Identity Selector Interoperability Profile v1.5. Available online:http:\/\/download.microsoft.com\/download\/1\/1\/a\/11ac6505-e4c0-4e05-987c-6f1d31855cd2\/Identity_Selector_Interoperability_Profile_V1.5.pdf.","key":"ref_15"},{"unstructured":"Sarma, A., and Girao, J. (2009). Wireless Personal Communication, Springer.","key":"ref_16"},{"unstructured":"Girao, J., and Sarma, A. (2010). Towards the Future Internet, IOS Press.","key":"ref_17"},{"doi-asserted-by":"crossref","unstructured":"Gomez-Skarmeta, A.F., Martinez-Julia, P., Girao, J., and Sarma, A. (2010, January 8). Identity based Architecture for Secure Communication in Future Internet. Proceedings of the 6th ACM Workshop on Digital Identity Management, Chicago, IL, USA.","key":"ref_18","DOI":"10.1145\/1866855.1866866"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"346","DOI":"10.1016\/j.compeleceng.2011.11.021","article-title":"Using identities to achieve enhanced privacy in future content delivery networks","volume":"38","year":"2012","journal-title":"Comput. Electr. Eng."},{"unstructured":"Galis, A., Abramowicz, N., and Brunner, M. Position paper Management and Service-Aware Networking Architectures (MANA) for Future Internet, System Functions, Capabilities and Requirements. Available online:http:\/\/www.future-internet.eu\/fileadmin\/documents\/madrid_documents\/sessions\/MANA-Position_Paper-V5.0.pdf.","key":"ref_20"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/j.csi.2010.01.003","article-title":"Towards pre-standardization of trust and reputation models for distributed and heterogeneous systems","volume":"32","year":"2010","journal-title":"Comput. Stand. Interfaces"},{"doi-asserted-by":"crossref","unstructured":"Yoshida, C., Sekino, T., Shigetomi, R., Otsuka, A., and Imai, H. (2010, January 6\u201310). Practical Searching over Encrypted Data by Private Information Retrieval. Proceedings of IEEE Global Telecommunications Conference, Cape Town, South Africa.","key":"ref_22","DOI":"10.1109\/GLOCOM.2010.5683316"},{"doi-asserted-by":"crossref","unstructured":"Pinkas, B., and Reinman, T. (2010). Oblivious RAM Revisited, Advances in Cryptology (CRYPTO), Springer.","key":"ref_23","DOI":"10.1007\/978-3-642-14623-7_27"}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/4\/4\/1016\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:53:40Z","timestamp":1760219620000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/4\/4\/1016"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,11,19]]},"references-count":23,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2012,12]]}},"alternative-id":["fi4041016"],"URL":"https:\/\/doi.org\/10.3390\/fi4041016","relation":{},"ISSN":["1999-5903"],"issn-type":[{"type":"electronic","value":"1999-5903"}],"subject":[],"published":{"date-parts":[[2012,11,19]]}}}