Research

• Identity Assurance in Open Environments as SOA and the Web
• Analysis and comparison of Current Identity Assurance Frameworks (UK-Office of the eEnvoy, OMB M-04-04, NIST 800-63, ICAM initiative, InCommon, etc.)
• Levels of Assurance for Attributes
• IdentityTrust - a framework to distinguish 
  • trust in the Identity Provider as the issuer of assertion
  • trust in the attributes of a digital identity
• Attribute aggregation 
• Managing Trust Relationships between Service Providers, Identity Providers and Service Consumers

• View my research vision statement. (in german)

Publications

Hint: Most of my publications have been published under my maiden name: Ivonne Thomas.

• In Conference Proceedings
  • Ivonne Thomas, Robert Warschofsky and Christoph Meinel: Whom to trust? - Generating WS-Security Policies based on Assurance Information In Proceedings of the 2011 IEEE European Conference on Web Services, Lugano, Switzerland, Sept. 2011.
  • Ivonne Thomas and Christoph Meinel: An attribute assurance framework to define and match trust in identity attributes In Proceedings of the 2011 IEEE International Conference on Web Services (ICWS 2011), Washington, USA, July 2011.
  • Michael Menzel, Robert Warschofsky, Ivonne Thomas and Christoph Meinel: A Cloud Security Platform: Securing Services in the Cloud In IEEE Service Cup 2010 at ICWS/SCC 2010, July, USA.
  • Ivonne Thomas and Christoph Meinel: An Identity Provider to manage Reliable Digital Identities for SOA and the Web In Proceedings of the 2010 ACM 9th Symposium on Identity and Trust on the Internet (IDTrust 2010) (Gaithersburg, USA, April 13 - 15, 2010).

  • Ivonne Thomas and Christoph Meinel: Enhancing claim-based identity manage- ment by adding a credibility level to the notion of claims. In Proceedings of the 2009 IEEE International Conference on Services Computing (SCC-09) (Bangalore, India, Sept 21 - 25).

    Martin Wolf, Ivonne Thomas, Michael Menzel, and Christoph Meinel: A Mes- sage Meta Model for Federated Authentication in Service-oriented Infrastructures In Proceedings of the 2009 IEEE International Conference on Service-Oriented Computing and Applications (Los Alamitos, CA, USA, 2009).

  • Regina N. Hebig, Christoph Meinel, Michael Menzel, Ivonne Thomas and Robert Warschofsky: A Web Service Architecture for Decentralised Identity- and Attribute- based Access Control, In Proceedings of the 2009 IEEE International Conference on Web Services (ICWS-09)(L.A., USA, July, 2009).

  • Michael Menzel, Ivonne Thomas, Benjamin Schueler, Maxim Schnjakin, Christoph Meinel: Security Requirements Specification in Process-aware Information Sys- tems, Highlights of the Information Security Solutions Europe (ISSE) 2009 Conference, vol. , Vieweg-Verlag, 2009.

  • Uwe Kylau, Ivonne Thomas, Michael Menzel, and Christoph Meinel 
    Trust Requirements in Identity Federation Topologies
    In Proceedings of the 2009 IEEE International Conference on Advanced Information Networking and Applications (AINA-09)(Bradford, UK, May 26 - 29, 2009).
  • Michael Menzel, Ivonne Thomas, and Christoph Meinel 
    Security Requirements Specification in Service-oriented Business Process Management
    In Proceedings of the 2009 IEEE International Dependability Conference (ARES-09) (Fukuoka, Japan, March 16 - 19, 2009). 
  • Ivonne Thomas, Michael Menzel, and Christoph Meinel 
    Using Quantified Trust Levels to describe Authentication Requirements in Federated Identity Management 
    In Proceedings of the 2008 ACM Workshop on Secure Web Services (Alexandria, Virginia, USA, October 31 - 31, 2008). SWS '08. pp. 71 - 80,  ISBN:978-1-60558-292-4
  • Ivonne Thomas, Michael Menzel, and Christoph Meinel 
    Quantified Trust Levels for Authentication, 
    Highlights of the Information Security Solutions Europe (ISSE) 2008 Conference, vol. , Vieweg-Verlag, 2008.
  • Michael Menzel, Ivonne Thomas, Christian Wolter, and Christoph Meinel 
    SOA Security - Secure Cross-Organizational Service Composition 
    Proc. Stuttgarter Softwaretechnik Forum (SSF), Fraunhofer IRB-Verlag, Stuttgart, Germany, November 2007. pp. 41 - 53,  ISBN 978-3-8167-7493-8
• Articles
  
  • Christoph Meinel, Michael Menzel, Ivonne Thomas: "SOA, aber sicher", In: "<kes> Die Zeitschrift für Informations-Sicherheit", 1/2009, S.38, ISSN 1611-440X. Download. (Mit freundlicher Genehmigung von www.kes.info)  Lektorat: Vera Cornel
• Technical Reports
  • Ivonne Thomas. Identity Management for Cross-Organizational SOA. In: Proceedings of the 2nd. Ph.D. retreat of the HPI Research School on Service-Oriented Systems Engineering, Technical Report, Vol. 23, Universitätsverlag Potsdam, Germany, 2008
• Master's thesis
  
  • Ivonne Thomas: "Federated Authentication for Web Services"

Recent Presentations

• CeBit 2009: "SOA Security and the World of Digital Identities"

Teaching

• SS 2009
  • Security in SOA (Master) (Lecture Assistance)
• WS 2008/09
  • Identity Management in SOA (Master) (Lecture Assistance)
• SS 2008
• Security in SOA (Master) (Lecture Assistance)
• Web Service Technologien (Bachelor) (Lecture Assistance)
• WS 2007/08
• Federated Identity Management (Master) (Lecture Assistance)

Further Activities

• Contribution in form and content of the SOA Security Kompendium 2.0
• Contribution in the organization of the SOA Security Symposium 2010 and 2008 at the HPI