Decentralized Identity Authentication with Auditability and Privacy

Abstract

Decentralized identity (DID) systems aim to give users full control over their identities by using completely decentralized technologies, such as blockchain or distributed ledgers, as identity providers. However, when user credentials are compromised, it is impossible in existing DID systems for the users to detect credential misuse. In this paper, we propose new DID authentication protocols with two properties: auditability and privacy. The former enables the detection of malicious authentication events, while the latter prevents an adversary from linking an authentication event to the corresponding user and service provider. We present two protocols that achieve auditability with varying privacy and performance guarantees. The first protocol has high performance, but it reveals information about the user. The second protocol achieves full privacy, but it incurs a higher performance overhead. We present a formal security analysis of our privacy-preserving protocols by using the Tamarin prover. We implemented them and evaluated their performance with a permissioned blockchain deployed over the Amazon AWS and a local cloud infrastructure. The results demonstrate that the first protocol is able to support realistic authentication workloads, while the second is nearly practical.

Enhancing JWT Authentication and Authorization in Web Applications Based on User Behavior History

“…and 'Should this individual be allowed access to our system?' The stateof-the-art definitions for these questions are presented in several research publications, as in [4,5] are presented an approach using smart cards and X.509 certificates to provide user identification and ensure data privacy and integrity.…”

A Blockchain-Based Solution for Diploma Management in Universities

“…Every participant can verify the integrity and validity of the data recorded in the blockchain [31,32], reducing the need for absolute trust in centralized entities [33]. In the context of diploma management, this transparency enables employers and other relevant parties to directly verify the authenticity and validity of diplomas [34,35], reducing the risk of fraud and sometimes the excessive delays caused by waiting times for authorized entities' verifications and responses [36,37].…”

“…Decentralized credential verification [34,35]: Blockchain allows for decentralized credential verification, enabling employers, educational institutions, and other stakeholders to directly access and validate educational qualifications without relying on intermediaries. This increases efficiency and reduces the need for time-consuming and resource-intensive manual verification processes.…”