Towards privacy-aware identity management