A Survey of Payment Approaches for Identity Federations in Focus of the SAML Technology
---
paper_title: Payment Technologies for E-Commerce

paper_content:

Electronic payment is the economic backbone of all e-commerce transactions. This book covers the major subjects related to e-payment such as, for example, public key infrastructure, smart cards, payment agents, digital cash, SET protocols, and micro-payment. Its first part covers the infrastructure for secure e-payment over the Internet, whereas in the second part a variety of e-payment methods and systems are described. This edited volume offers a well-written and sound technical overview of the state of the art in e-payment for e-business developers, graduate students, and consultants. It is also ideally suited for classes and training courses in e-commerce or e-payment.
---
paper_title: Requirements for network payment: the NetCheque perspective

paper_content:

Secure methods of payment are needed before we will see widespread commercial use of the Internet. Recently proposed and implemented payment methods follow one of three models: electronic currency, credit-debit, and secure credit card transactions. Such payment services have different strengths and weaknesses with respect to the requirements of security, reliability, scalability, anonymity, acceptability, customer base, flexibility, convertibility, efficiency, ease of integration with applications, and ease of use. NetCheque is a payment system based on the credit-debit model. NetCheque is described and its strengths with respect to these requirements are discussed.
---
paper_title: Payment Technologies for E-Commerce

paper_content:

Electronic payment is the economic backbone of all e-commerce transactions. This book covers the major subjects related to e-payment such as, for example, public key infrastructure, smart cards, payment agents, digital cash, SET protocols, and micro-payment. Its first part covers the infrastructure for secure e-payment over the Internet, whereas in the second part a variety of e-payment methods and systems are described. This edited volume offers a well-written and sound technical overview of the state of the art in e-payment for e-business developers, graduate students, and consultants. It is also ideally suited for classes and training courses in e-commerce or e-payment.
---
paper_title: Requirements for network payment: the NetCheque perspective

paper_content:

Secure methods of payment are needed before we will see widespread commercial use of the Internet. Recently proposed and implemented payment methods follow one of three models: electronic currency, credit-debit, and secure credit card transactions. Such payment services have different strengths and weaknesses with respect to the requirements of security, reliability, scalability, anonymity, acceptability, customer base, flexibility, convertibility, efficiency, ease of integration with applications, and ease of use. NetCheque is a payment system based on the credit-debit model. NetCheque is described and its strengths with respect to these requirements are discussed.
---
paper_title: Payment Technologies for E-Commerce

paper_content:

Electronic payment is the economic backbone of all e-commerce transactions. This book covers the major subjects related to e-payment such as, for example, public key infrastructure, smart cards, payment agents, digital cash, SET protocols, and micro-payment. Its first part covers the infrastructure for secure e-payment over the Internet, whereas in the second part a variety of e-payment methods and systems are described. This edited volume offers a well-written and sound technical overview of the state of the art in e-payment for e-business developers, graduate students, and consultants. It is also ideally suited for classes and training courses in e-commerce or e-payment.
---
paper_title: Digital Payment Systems with Passive Anonymity-Revoking Trustees

paper_content:

Anonymity of the participants is an important requirement for some applications in electronic commerce, in particular for payment systems. Because anonymity could be in conflict with law enforcement, for instance in cases of blackmailing or money laundering, it has been proposed to design systems in which a trustee or a set of trustees can selectively revoke the anonymity of the participants involved in suspicious transactions. From an operational point of view, it can be an important requirement that such trustees are neither involved in payment transactions nor in the opening of an account, but only in case of a justified suspicion. In this paper we propose the first efficient anonymous digital payment systems satisfying this requirement. The described basic protocol for anonymity revocation can be used in on-line or off-line payment systems.
---
paper_title: NetCash: a design for practical electronic currency on the Internet

paper_content:

Licensing is a topic of increasing importance for software publishers and users. More and more, the magnitude of financial transfers between these two partners are determined by some electronic licensing service being part of the system on which the licensed software is running. In order to ease the use and management of such licensing schemes and to enable economic software usage in enterprise-wide computer systems through flexible and fair billing structures, various organizations are working on formulating requirements, defining architectures, and building standard interfaces for so called license brokerage systems. The trustworthiness of these services is essential because large amounts of money can depend on them. Most of these licensing services are currently operating independently of access control and rely on proprietary and unpublished security algorithms. This paper proposes an extension of access control to integrate licensing called Stateful Access Control and it addresses some aspects of virus protection.
---
paper_title: Payment Technologies for E-Commerce

paper_content:

Electronic payment is the economic backbone of all e-commerce transactions. This book covers the major subjects related to e-payment such as, for example, public key infrastructure, smart cards, payment agents, digital cash, SET protocols, and micro-payment. Its first part covers the infrastructure for secure e-payment over the Internet, whereas in the second part a variety of e-payment methods and systems are described. This edited volume offers a well-written and sound technical overview of the state of the art in e-payment for e-business developers, graduate students, and consultants. It is also ideally suited for classes and training courses in e-commerce or e-payment.
---
paper_title: A Fair Electronic Cash Scheme

paper_content:

This paper proposes a fair anonymous electronic cash scheme that ensures fairness for both clients and vendors. The proposed scheme is based on the Nyberg-Rueppel digital signature scheme, therefore it provides an alternative for the construction of fair electronic cash. The proposed scheme meets all basic security requirements for fair electronic cash including fairness, anonymity, confidentiality, authenticity, efficiency and double-spending detection.
---
paper_title: NetCash: a design for practical electronic currency on the Internet

paper_content:

Licensing is a topic of increasing importance for software publishers and users. More and more, the magnitude of financial transfers between these two partners are determined by some electronic licensing service being part of the system on which the licensed software is running. In order to ease the use and management of such licensing schemes and to enable economic software usage in enterprise-wide computer systems through flexible and fair billing structures, various organizations are working on formulating requirements, defining architectures, and building standard interfaces for so called license brokerage systems. The trustworthiness of these services is essential because large amounts of money can depend on them. Most of these licensing services are currently operating independently of access control and rely on proprietary and unpublished security algorithms. This paper proposes an extension of access control to integrate licensing called Stateful Access Control and it addresses some aspects of virus protection.
---
paper_title: Payment Technologies for E-Commerce

paper_content:

Electronic payment is the economic backbone of all e-commerce transactions. This book covers the major subjects related to e-payment such as, for example, public key infrastructure, smart cards, payment agents, digital cash, SET protocols, and micro-payment. Its first part covers the infrastructure for secure e-payment over the Internet, whereas in the second part a variety of e-payment methods and systems are described. This edited volume offers a well-written and sound technical overview of the state of the art in e-payment for e-business developers, graduate students, and consultants. It is also ideally suited for classes and training courses in e-commerce or e-payment.
---
paper_title: A Federated Privacy-Enhancing Identity Management System (FPE-IMS)

paper_content:

Privacy and identity management should not been treated as generic problems providing generic solutions and architectures. A systematic approach is required against the problems of conducting identity management effortlessly, conveniently and smoothly solving interoperability problems that impede the communication and creation of unified infrastructures and produce an interoperable solution for identity management. This paper aims to contribute towards the proposal of a federated privacy-enhancing identity management system providing all the main tools and services in order address the major privacy requirements, required for the achievement of privacy aware e/m-transactions. This system can be embedded to each reconfigurable framework, enhancing privacy issues on existing web services based platforms, which delivers privacy-aware e/m-organizational services.
---
paper_title: Kerberos: an authentication service for computer networks

paper_content:

When using authentication based on cryptography, an attacker listening to the network gains no information that would enable it to falsely claim another's identity. Kerberos is the most commonly used example of this type of authentication technology. The authors concentrate on authentication for real-time, interactive services that are offered on computer networks. They use the term real-time loosely to mean that a client process is waiting for a response to a query or command so that it can display the results to the user, or otherwise continue performing its intended function. This class of services includes remote login, file system reads and writes, and information retrieval for applications like Mosaic. >
---
paper_title: VOMS, an Authorization System for Virtual Organizations

paper_content:

We briefly describe the authorization requirements, focusing on the framework of the DataGrid and DataTAG Projects and illustrate the architecture of a new service we have developed, the Virtual Organization Membership Service (VOMS), to manage authorization information in Virtual Organization scope.
---
paper_title: From gridmap-file to VOMS : managing authorization in a Grid environment

paper_content:

Grids are potentially composed of several thousands of users from different institutions sharing their computing resources (or using resources provided by third parties). Controlling access to these resources is a difficult problem, as it depends on the policies of the organizations the users belong to and of the resource owners. Moreover, a simple authorization implementation, based on a direct user registration on the resources, is not applicable to a large scale environment. In this paper, we describe the solution to this problem developed in the framework of the European DataGrid [M. Draoli, G. Mascari, R. Piccinelli, Project Presentation, DataGrid-11-NOT-0103-_1] and DataTAG [http://www.datatag.org/] projects: the Virtual Organization Membership Service (VOMS) [R. Alfieri, et al., Managing Dynamic User Communities in a Grid of Autonomous Resources, TUBT005, in: Proceedings of the CHEP 2003, 2003]. VOMS allows a fine grained control of the use of the resources both to the users' organizations and to the resource owners.
---
paper_title: Diameter Base Protocol

paper_content:

The Diameter base protocol is intended to provide an Authentication, Authorization and Accounting (AAA) framework for applications such as network access or IP mobility. Diameter is also intended to work in both local Authentication, Authorization & Accounting and roaming situations. This document specifies the message format, transport, error reporting, accounting and security services to be used by all Diameter applications. The Diameter base application needs to be supported by all Diameter implementations.
---
paper_title: Payment for Services in Session Initiation Protocol (SIP)

paper_content:

Service usage might require some form of compensation and this is also ::: true for many communication systems where an entity receiving a call ::: should be able to charge the caller. This is necessary for allowing ::: fair communication between two communicating parties and is a major ::: strategy for reducing the viability of SPAM. This draft proposes an ::: approach for doing this in SIP using the Security Assertion Markup ::: Language (SAML). It relies on a third party to act as a payment ::: provider and is designed for low value transactions. It does not aim ::: to provide the same capability as other authentication, authorization ::: and accounting backend infrastructures.
---
paper_title: Harmonizing service and network provisioning for federative access in a mobile environment

paper_content:

In this paper we propose an integrated platform to power the symbiosis between networks and services whilst supporting mobility of users. This platform is based on methods for authentication, authorization and payment of services in a roaming environment. Existing technologies are combined and enhanced to provide a blueprint for a platform to leverage the interaction of services with the underlying network. Traditionally, such functions as discovery, authentication and authorization exist in parallel for networks and for services, without any association between the systems. This rigid layered approach is abandoned in favour of one that is more integrated and allows these functions to be reused rather than duplicated. Payment is treated as an essential and inherent part of the architecture, in order to facilitate its commercialization and adoption.
---
paper_title: Federation Payments using SAML Tokens with Trusted Platform Modules

paper_content:

In this paper, a new federation payment scheme is introduced. Since most federations use offline payments by creating invoices at the end of a specified time span, the approach of Payment Tokens with Trusted Platform Modules guarantees reliable on-the-fly payments without having to contact a payment provider each time a payment is required.
---
paper_title: Combining identity federation with Payment: The SAML-based Payment Protocol

paper_content:

The management of services offered within identity federations comprises not only the traditional service elements but also those management requirements derived from the federation's specification. However, since a discrepancy between the management needs related to payment and the capabilities offered by the federation's protocols can be observed, this paper aims to provide a solution to bridge this gap. SAML is currently used in many identity federations as a language and protocol for transmitting critical data about a participant's authentication and his/her attributes. Authorization based upon attributes often fulfils the requirements within a non-commercial context. However, whenever payment is required, federation partners have to establish a solution to handle it. Whilst commercial service providers may often use their already established payment solutions, for semi-commercial providers as well as for micropayments and niche-providers, a new approach may be required. Therefore, this paper proposes to use the identity federation language SAML to build such a new solution. Using the novel designed SAML Payment Assertion, SAML is able to handle all the payment-related processes without compromising security. These benefits provided by the protocol and the language would raise the interests for new service providers to join federations that are built upon SAML.
---
paper_title: Token-Based Payment in Dynamic SAML-Based Federations

paper_content:

The newly developed approach on token-based payments introduces an integration of payments with current schemes for Identity Federations based on SAML. This new design utilizes an established federation infrastructure as well as its protocols. Only relevant mechanisms to support the payment on the federation infrastructure level are extended.
---
paper_title: Bridging between SAML-Based Payment and Other Identity Federation Payment Systems

paper_content:

Identity Federations are increasingly being used to establish convenient and secure attribute-based authentication and authorization systems. During the last few years, a third aspect has become important within these federations: i.e., payment. Thus, several payment approaches have been designed and used in Identity Federations. However, when more than one federation is being combined into an inter-federation association, federation bridges have to be established to translate messages between the participating federations. Whilst the problem of bridging identity information between federations has already been considered in many research activities, the problem of how to bridge payment data still remains unsolved. Therefore, this paper presents a solution to bridge between a SAML-based payment enabled Identity Federation and four other kinds of payment solutions used by Identity Federations.
---

Title: A Survey of Payment Approaches for Identity Federations in Focus of the SAML Technology

Section 1: INTRODUCTION
Description 1: This section provides an introduction to identity federations, their relevance in various environments, and the motivation for integrating payment systems with a focus on SAML technology.

Section 2: ELECTRONIC PAYMENT
Description 2: This section provides an overview of various electronic payment approaches, categorizing them into submission of account information, reimbursable data, and digital money, and comparing them based on specific requirements.

Section 3: IDENTITY FEDERATIONS
Description 3: This section details the major approaches to identity federations, focusing on SAML-based solutions like Shibboleth, Liberty Alliance, and the Web Service Federation, as well as other relevant methods.

Section 4: PAYMENT SOLUTIONS FOR IDENTITY FEDERATIONS
Description 4: This section examines the current approaches for integrating payment processes into identity federations, with a focus on SAML-based payment solutions.

Section 5: SUMMARY, CONCLUSIONS, NEXT STEPS, AND LESSONS LEARNED
Description 5: This section summarizes the findings, draws conclusions about the effectiveness of SAML-based payment solutions, and discusses future research directions and lessons learned from the survey.