Identity and Access Management

Block-chain-based Identity and access management framework is a promising solution to privacy and security issues raised during the exchange of patient data in the healthcare industry. This technology ensures the confidentiality and integrity of sensitive information by providing a decentralized and immutable ledger. In our research, we propose an identity and access management system that employs Hyper-ledger Fabric and OAuth 2.0 for improved security and scalability. This combination allows for transparency and immutability of user transactions and minimizes the risk of fraud and unauthorized access. Additionally, Hyper-ledger Fabric's privacy, security, and scalability features enable granular access control to sensitive information, while OAuth 2.0 authorizes only trusted third-party applications to access specific data on the Fabric network. The proposed approach can handle large volumes of data and support multiple applications, thus providing a secure and scalable solution for managing access to the Fabric network. Moreover, our solution employs Role-based access control based on the patient's role, ensuring privacy and confidentiality. Our statistical analysis demonstrates that the proposed approach can efficiently and securely manage patient identity and access, potentially transforming the healthcare industry by enhancing data interoperability, reducing fraud and errors, and improving patient privacy and security. Furthermore, our solution can facilitate compliance with regulatory requirements such as HIPAA and GDPR.

Identity and access management is essential of security issues in cloud. This paper presents an identity and access management architecture to solve a series of new problems that cloud computing model has brought in identity and access management. The architecture considering the problem of security access provided by users to access cloud resources and users upload resources to solve some of the limitations of the existing architecture. The architecture uses security as a service technology to achieve a standardized and scalable architecture, and proposed specific architecture can be implemented.

The Internet of Things poses some of the biggest security challenges in the present day. Companies, users and infrastructures are constantly under attack by malicious actors. Increasingly, attacks are being launched by hacking into one vulnerable device and hence disabling entire networks resulting in great loss. A strong identity management framework can help better protect these devices by issuing a unique identity and managing the same through its lifecycle. Identity of Things (IDoT) is a term that has been used to describe the importance of device identities in IoT networks. Since the traditional identity and access management (IAM) solutions are inadequate in managing identities for IoT, the Identity of Things (IDoT) is emerging as the solution for issuance of Identities to every type of device within the IoT IAM infrastructure. This paper presents the survey of recent research works proposed in the area of device identities and various commercial solutions offered by organizations specializing in IoT device security.

Because of the growth in the use of cloud computing and the migration of services to this paradigm, it becomes necessary to investigate security issues that might compromise its use. Identity and Access Management is among these issues and is related to the management of users and access to their data. Federated Identity Management is widely adopted in the cloud to provide useful features to identity management systems, but maintaining user privacy in those systems is still a challenge. This paper describes the implementation of a privacy-preserving identity federation in the cloud. Our motivation was to develop a proof of concept, in order to elucidate the identity federation setup of Shibboleth and the handling of private attributes performed by uApprove in a cloud computing environment. The paper shows a description of the deployment of the identity and service providers, their integration and a detailed analysis of the scenario.

Employees' tasks always change according to the reengineering of the business processes. IT solutions applied by enterprises develop continuously. These changes and developments may influence users' access to the more and more complex IT systems. The management of changes, access requests, departing employees and other problems are usually not included in the strengths of today's companies. This paper gives an overview of the requirements of modern user identity and access management from the point of view of IT security and organization.

Nowadays, people around the world completely depend and mostly use the Internet to maintain communication, contact with family, friends and with people around the world, access and exchange information, and enjoy multimedia communication. As the use of internet increase then users those who use internet and Access the information using internet in the organization or outside organization also increase. User Data security is very tedious and important part of IT system and its user lifecycle control system. Because of this the reason user data security is always consider while designing security systems for an organization. Modern approaches are to maintain the track of users and records of user access, Identity management systems and Access Management Systems are used. Identity management system help to provide a super-set of user provisioning systems that provide easy management of user credentials and their identity information to users and others those who need that information. Similarly Access Management Systems provide strong authentication and authorization solution using SSO, WebSEAL, and policy-based approach to identify who can access the resource at what level. The new research and approaches provide such a new functions base on organization policies that help to re-engine the access of user base on security procedures to the resources which are available. This paper provides an overview of the Identity Management Systems Access Management System and Federated Identity Manager that how they are use to manage the user security and also the challenges or risks in implementing a Secure system.

Identity and Access Management (IAM) has emerged as a cornerstone of information security in multi-cloud environments, where organizations leverage diverse services across multiple platforms. As enterprises increasingly adopt cloud-first strategies and distribute resources across an average of nearly five cloud providers, maintaining consistent identity controls presents significant challenges. The complex nature of these distributed architectures often creates fragmented security policies, inconsistent authentication mechanisms, and critical visibility gaps that adversaries actively exploit. This article presents a comprehensive framework for strengthening IAM in multi-cloud settings through five essential components: unified identity management, adaptive authentication, policy harmonization, federated access solutions, and advanced monitoring capabilities. Organizations can address the inherent security challenges of multi-cloud environments by centralizing identity repositories, implementing dynamic verification based on contextual factors, standardizing security policies, enabling seamless cross-platform authentication, and leveraging AI-enhanced monitoring. The framework addresses how these integrated components enable enterprises to maintain robust security controls despite the heterogeneous nature of diverse cloud ecosystems, providing practical guidance for implementing effective IAM strategies that balance security requirements with operational efficiency and user experience.

Information security is shifting from a traditional perimeter-based approach to an identity-based approach where the organization’s boundaries are where their digital identities exist. The organization has multiple stakeholders having access to various organization resources. Systems and applications are part of organization resources that help them achieve their business goals. These systems and applications are internally or externally exposed to allow all stakeholders to have seamless access, thus making identity and access management a big challenge. Identity and Access Management (IAM) is a fundamental part of information security. It plays a critical role in keeping the organization’s information security posture resilient to cyber attacks. This paper will identify various components of an IAM solution that are essential and should be considered while implementing and assessing the IAM solution and provides a high-level IAM framework that will allow information security professionals to assess the IAM security posture of an organization.

Maintaining access control in a cross cloud environment with a growing user base presents significant challenge. The effectiveness of cloud computing today heavily depends on the ability to share resources efficiently. While data and service sharing are crucial for collaborative endeavors, maintaining security in identity and access management within this context is complex. Various issues arise, such as the incompatibility, dynamic user groups, risk of a single point of failure and establishing trust. Although significant research has been conducted, several challenges remain unresolved. This article categorizes the challenges associated with access control and provides relevant background information. It also assesses various studies and projects, highlighting their strengths and weaknesses. It explores traditional approaches like Attribute-Based Encryption (ABE) schemes and Identity federation frameworks, in addition to more advanced methods, including block chain and AI/ML-driven access management. A comparative analysis of these studies is presented to illustrate their differences and similarities.

Identity and Access Management (IAM) is essential for cybersecurity architecture because of the increasing complexity of the digital enterprise. The research investigates how Artificial Intelligence (AI) transforms Identity and Access Management (IAM) by establishing context-aware systems that function adaptively through automated identity governance capabilities. Concepts from traditional IAM infrastructure face challenges when implementing dynamic access models because they base their function on manual processes and static policies in their design. Machine learning combined with behavioral analytics and orchestration capabilities installed across the entire IAM lifecycle by AI can solve these issues, from authentication procedures to authorization functions and continuing through entitlement governance until policy execution. AI integration establishes continuous authentication with behavioral biometrics and conducts real-time anomaly detection through unsupervised learning models to enable proactive threat mitigation through risk-adaptive access controls. Through AI, the discovery and automation of access rights become possible because systems use actual user activities and organizational settings to refine and certify proper access definitions. The automation systems help organizations comply with GDPR and HIPAA by delivering immediate policy changes while providing auditable access decision logs. The research document evaluates how AI contributes to creating IAM infrastructure that can adapt because it uses predictive load-balancing techniques, self-healing orchestration mechanisms, and autonomous incident response capabilities. The document shows how IAM unites with Security Operations Centers (SOCs) by correlating identity signals with wider security monitoring data to enhance security detection visibility and coordinated response. This report reveals through technical precision and industry examples that AI-driven IAM functions as a security defense system and a business-enabling power for operational speed, compliance adherence, and digital safety in organizational networks. The research highlights AI's critical position in creating security for contemporary identity perimeters.

The rapid proliferation of IoT devices across various industries has amplified the importance of secure and efficient identity and access management (IAM). This chapter explores the integration of blockchain technology for decentralized authentication in IoT ecosystems, addressing critical limitations of traditional authentication methods. Key discussions include the challenges posed by the resource-constrained nature of IoT devices and the dynamic behavior of IoT networks. The chapter delves into cryptographic solutions optimized for IoT environments and evaluates the balance between security, scalability, and performance. The potential benefits of decentralized approaches, such as improved resilience, enhanced privacy, and reduced reliance on central authorities, are critically assessed alongside their inherent challenges. Emerging trends and future directions for leveraging blockchain to enhance IoT device security are also highlighted. This comprehensive analysis aims to guide researchers and industry professionals toward developing robust, scalable IAM solutions for IoT.

Abstract—The rise of cybercrime has made fraud detection a critical focus for financial services, where even minor improvements in detection rates can translate into significant savings. Traditional rule- based detection systems are increasingly unable to keep up with the complexity and evolving nature of fraudulent schemes. This work explores the role of artificial intelligence (AI), particularly deep learning, in enhancing fraud detection capabilities. Here we propose a novel AI-driven fraud detection system that incorporates Single Sign-On (SSO) identity and access management (IAM) frameworks, leveraging a dual-layered approach with batch and real-time processing. The batch layer establishes a user trust identity by analysing historical behavioural patterns, which informs an access-granting mechanism that evaluates real-time transaction data for fraud indicators. A deep iterative convoluted memory classifier then assesses transactions, for detecting frauds. This architecture automates fraud detection, allowing analysts to focus on high-priority cases and ensuring that only authenticated users can access sensitive information. Our experiments are Conducted in the MATLAB environment, From the analysis it was revealed that the model's effectiveness, showing promise for scalable, efficient fraud prevention in financial services. This work underscores the transformative potential of AI in securing financial transactions against sophisticated cyber threats. Index Terms— cybercrime, Fraud, Financial Transactions, artificial intelligence, identity and access management, fraud detection,

Nowadays, considerable attention has been given by the researchers in the field of Cloud Computing to the emerging Inter-Cloud computing paradigm, where different cloud service providers collaborate or federate to achieve better QoS and cost efficiency. In this context, in order to prevent the unauthorized access of the distributed system components, authentication and authorization functions are to be enforced effectively. In this paper, we propose the conceptual model of the agent-based approach for the identity and access management in the dynamic inter-cloud environments where the Cloud Service Providers or the partners of the inter-cloud federation join and leave the federation dynamically. We further discuss the architectural model for the agent-based approach for solving the policy conflicts in the inter-cloud scenario while dealing with the access requests of cloud consumers in the inter-cloud environments. A few open issues in the area of identity and access management in the inter-cloud environment are also discussed.

The study aimed at identifying the impact of the application of IT governance represented by (Planning and Organization, Possessiveness and Implementation, Support and Delivery, Monitoring and Evaluation, and Guidance and Control), using (COBIT 5) framework to reduce the risks associated with cloud computing (Identity and Access Management, Data protection, Virtual operating risk, IT support, and Organization) in the Jordanian industrial companies public shareholding from the perspective of Jordanian Certified Public Accountants. The study follows sequential procedures as a strategy for the mixed methods that have been applied. The researcher collects qualitative data that are quantitatively analyzed. A questionnaire was used to achieve the purpose of the study. The study population included all external accountants practicing auditing in Jordan, who number until the end of 2017 (384), a simple random sample was drawn, the sample included (192) auditors.
 
 The study concluded that all the decisions of the (COBIT5) Committee including Planning and Organization, Possessiveness and Implementation, Support and Delivery, Monitoring and Evaluation, and Guidance and Control affect the reduction of the risk of cloud computing in terms of identity and Access Management, Data protection, Virtual operating risk, IT support, and Organization the Jordanian industrial companies public shareholding from the perspective of Jordanian Certified Public Accountants. Based on the findings of the study, the researcher recommends that Jordanian industrial companies need to activate the role of security controls and increase the level of application against the environmental risks surrounding the company likely to occur as a result of the application of cloud computing. It is also necessary to update and develop information technologies, especially those related to technology.

Modern firms rely on HRMS (human resource management system) and IAM (identity and access management) to manage staff and protect personal information. A human resource management system, or HRMS, is a comprehensive set of tools to manage an employee's stay with a firm, from recruiting to performance review and even off boarding. In other terms, identity and access management (IAM) is a security solution that restricts access to specific systems and maintains digital identities. Its primary purpose is to keep unauthorized persons from accessing important information.