OLYMPUS: A distributed privacy-preserving identity management system

Moreno, Rafael Torres; Rodriguez, Jesus Garcia; López, Cristina Timón; Bernabé, Jorge Bernal; Skarmeta, Antonio F.

doi:10.1109/giots49054.2020.9119663

Cited by 5 publications

(7 citation statements)

References 13 publications

(7 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In recent years blockchain technology has gained more and more ground, and there have been a few attempts that try to combine this technology with other already mentioned techniques, such as P-ABCs, presented in [36][37][38][39][40][41][42][43]. Lately, blockchain technology has offered identity management solutions that preserve user privacy in various e-services [44][45][46][47], and we hope to extend the field of applications in HARSs. Using blockchain technology in HARSs can improve security and privacy; blockchain identity management schemes offer decentralized storage using multiple nodes and identity providers without a central authority, making it more difficult for intruders to intercept critical information.…”

Section: Related Workmentioning

confidence: 99%

Exploiting Security Issues in Human Activity Recognition Systems (HARSs)

2023

View full text Add to dashboard Cite

Human activity recognition systems (HARSs) are vital in a wide range of real-life applications and are a vibrant academic research area. Although they are adopted in many fields, such as the environment, agriculture, and healthcare and they are considered assistive technology, they seem to neglect the aspects of security and privacy. This problem occurs due to the pervasive nature of sensor-based HARSs. Sensors are devices with low power and computational capabilities, joining a machine learning application that lies in a dynamic and heterogeneous communication environment, and there is no generalized unified approach to evaluate their security/privacy, but rather only individual solutions. In this work, we studied HARSs in particular and tried to extend existing techniques for these systems considering the security/privacy of all participating components. Initially, in this work, we present the architecture of a real-life medical IoT application and the data flow across the participating entities. Then, we briefly review security and privacy issues and present possible vulnerabilities of each system layer. We introduce an architecture over the communication layer that offers mutual authentication, solving many security and privacy issues, particularly the man-in-the-middle attack (MitM). Relying on the proposed solutions, we manage to prevent unauthorized access to critical information by providing a trustworthy application.

show abstract

Section: Related Workmentioning

confidence: 99%

Exploiting Security Issues in Human Activity Recognition Systems (HARSs)

2023

View full text Add to dashboard Cite

show abstract

“…In this paper, we leverage our previous work while also taking into account the GDPR's demands to improve our access control mechanisms. In particular, we rely on ObLivious identitY Management for Private and User-friendly Services (OLYMPUS) [19], which aims to provide a user-friendly and distributed identity management system that addresses the data minimization challenge in online and offline scenarios while maintaining good usability, implementation, and scalability features. The distributed IdP introduced in OLYMPUS allows users to leverage efficient p-ABCs.…”

Section: Access Control Conceptsmentioning

confidence: 99%

“…The MiMurcia infrastructure has been further extended with the inclusion of the OLYMPUS (More information about the system, like details on its architecture, can be found in [19]) identity management system (IdM) for privacy-preserving authentication of users. OLYMPUS IdM has multiple advantages over traditional identity providers (IdP).…”

Section: Mimurcia Iot Platformmentioning

confidence: 99%

Data Protection by Design in the Context of Smart Cities: A Consent and Access Control Proposal

Daoudagh

Marchetti

Savarino

et al. 2021

Sensors

Self Cite

View full text Add to dashboard Cite

The growing availability of mobile devices has lead to an arising development of smart cities services that share a huge amount of (personal) information and data. Without accurate and verified management, they could become severe back-doors for security and privacy. In this paper, we propose a smart city infrastructure able to integrate a distributed privacy-preserving identity management solution based on attribute-based credentials (p-ABC), a user-centric Consent Manager, and a GDPR-based Access Control mechanism so as to guarantee the enforcement of the GDPR’s provisions. Thus, the infrastructure supports the definition of specific purpose, collection of data, regulation of access to personal data, and users’ consents, while ensuring selective and minimal disclosure of personal information as well as user’s unlinkability across service and identity providers. The proposal has been implemented, integrated, and evaluated in a fully-fledged environment consisting of MiMurcia, the Smart City project for the city of Murcia, CaPe, an industrial consent management system, and GENERAL_D, an academic GDPR-based access control system, showing the feasibility.

show abstract

“…The previous section shows the current state of the art concerning traditional IdM systems and introduces some disruptive Blockchain-based solutions. Now we introduce a novel proposal based on the OLYMPUS identity management framework [13], [34] in combination with DLT technologies.…”

Section: Blockchain-based Dp-abc Approachmentioning

confidence: 99%

“…The European project OLYMPUS [13], [34], introduces a new proposal for identity management applying distributed techniques, intending to solve the problems presented in previous solutions. This approach devises a privacy-preserving identity management solution evolving from federated identity systems and eliminating the IdP as the single point of failure.…”

Section: A Reference Dp-abc Architecturementioning

confidence: 99%

A Trusted Approach for Decentralised and Privacy-Preserving Identity Management

et al. 2021

Self Cite

View full text Add to dashboard Cite

Identity Management (IdM) systems have traditionally relied on a centralized model prone to privacy, trust, and security problems, like potential massive data breaches or identity spoofing. Identity providers accumulate excessive power that might allow them to become a big brother, analyzing and storing as much data as possible. Users should be able to trust identity providers and manage their personal information straightforwardly without compromising their privacy. The European OLYMPUS project introduces a distributed approach for IdM based on enhanced Attribute-Based Credentials (ABC) that splits the role of Identity Provider to limit their influence and chances to become a unique point of failure. However, the trust relationship between service providers, users, and identity providers is still a gap in those kinds of privacy-preserving ABC systems. Decentralized technologies are an opportunity to break away from the centralized model and propose systems that respect privacy while increasing users' trust. This paper presents an evolution of the OLYMPUS architecture, maintaining all the privacy features and incorporating distributed ledger technologies to enhance trust and security in online transactions and IdM systems. The proposed system has been implemented, tested, and validated, showing its performance and feasibility to manage user's identity in a fully privacy-preserving, distributed and reliable way.

show abstract

OLYMPUS: A distributed privacy-preserving identity management system

Cited by 5 publications

References 13 publications

Exploiting Security Issues in Human Activity Recognition Systems (HARSs)

Exploiting Security Issues in Human Activity Recognition Systems (HARSs)

Data Protection by Design in the Context of Smart Cities: A Consent and Access Control Proposal

A Trusted Approach for Decentralised and Privacy-Preserving Identity Management

Contact Info

Product

Resources

About