Towards A Secure Federated Information System