Logo des Repositoriums
 
Textdokument

Smart Contract Federated Identity Management without Third Party Authentication Services

Lade...
Vorschaubild

Volltext URI

Dokumententyp

Zusatzinformation

Datum

2019

Zeitschriftentitel

ISSN der Zeitschrift

Bandtitel

Verlag

Gesellschaft für Informatik, Bonn

Zusammenfassung

Federated identity management enables users to access multiple systems using a single login credential. However, to achieve this a complex privacy compromising authentication has to occur between the user, relying party (RP) (e.g., abusiness), and a credential service provider(CSP) that performs the authentication. In this work, we use a smart contract on a blockchain to enable an architecture where authentication no longer involves the CSP. Authentication is performed solely through user to RP communications (eliminating fees and enhancing privacy). No third party needs to be contacted, not even the smart contract. No public key infrastructure (PKI) needs to be maintained. And no revocation lists need to be checked. In contrast to competing smart contract approaches, ours is hierarchically managed (like a PKI) enabling better validation of attribute providers and making it more useful for large entities to provide identity services for their constituents (e.g.,a government) while still enabling users to maintain a level of self-sovereignty.

Beschreibung

Mell, Peter; Dray, Jim; Shook, James (2019): Smart Contract Federated Identity Management without Third Party Authentication Services. Open Identity Summit 2019. Gesellschaft für Informatik, Bonn. PISSN: 1617-5468. ISBN: 978-3-88579-687-9. pp. 37-48. Regular Research Papers. Garmisch-Partenkirchen, Germany. 28.-29. March 2019

Zitierform

DOI

Tags