Using Identity Management and Secure DNS for Effective and Trusted User Controlled Light-Path Establishment

This paper investigates and demonstrates the role of identity management as an integral part of the overall trust establishment mechanisms required for user-controlled end-to-end light-path provisioning. Within the scope of identity management, also lack of effective trust establishment procedures between the user's identity provider and the optical network service providers hampers effective exchange of user identity information needed for authorizing the reservation and utilization of network resources. We show how secure DNS can help establishing trust between parties in different administrative domains, without any mutual prearrangement. This DNS approach enables the dynamic realization of secured communication channels in order to exchange identity-related information required for controlling the access to network resources