Re-Shaping the EU Digital Identity Framework

Lips, Silvia; Виноградова, Н. А.; Krimmer, Robert; Draheim, Dirk

doi:10.1145/3543434.3543652

Cited by 5 publications

(3 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Regarding our categories, most publications state blockchain (18) and smart contract (14) or derivations. Further categories include wallets (3), distributed ledger technologies (2), consensus (1), and consensus algorithms, such as proof-of-work or proof-of-authority (2). Regarding the use case, we notice cryptocurrencies (7), Bitcoin (5), Ethereum (6), and Monero (1).…”

Section: Overview Of the Literature Surveymentioning

confidence: 99%

“…eIDAS as of 2014 [1] focuses on the interoperability of identities within the member states of the European Union (EU) for the use case of eGovernment. However, with the new regulation [2], further use cases should be made possible, such as universities, health, finance, online services, and mobility. One major change is the introduction of a wallet [3], described in detail in the architecture and reference framework [4].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Analyzing the Threats to Blockchain-Based Self-Sovereign Identities by Conducting a Literature Survey

Pöhn,

Grabatin,

Hommel

2023

Applied Sciences

View full text Add to dashboard Cite

Self-sovereign identity (SSI) is a digital identity management model managed in a decentralized manner. It allows identity owners to manage and store their digital identities in a software wallet, for example, on a smartphone, without relying on centralized providers. This approach tries to enhance the security and privacy of digital identities and, thereby, their owners. With the new eIDAS regulation, elements of SSI, such as the wallet, are being pushed onto the market. However, since the model is relatively new, the security threats are still not fully known. This is shown by a brief security analysis of selected existing SSI wallets. In order to get a picture of the known threats, we systematically analyze and categorize related work in the field of SSI and elements applied by SSI. We then evaluate their application to current SSI systems and identify future work.

show abstract

Section: Overview Of the Literature Surveymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Analyzing the Threats to Blockchain-Based Self-Sovereign Identities by Conducting a Literature Survey

Pöhn,

Grabatin,

Hommel

2023

Applied Sciences

View full text Add to dashboard Cite

show abstract

“…(ii) Self-sovereign identities: Self-sovereign identities are an approach to digital identities that gives individuals control over the information they use to prove who they are to services on the Internet. Te research direction obtains momentum with the new version of the electronic IDentifcation, Authentication, and trust Services (eIDAS) regulation [131,132]. As self-sovereign identity is diferent from traditional identity management [133], at least from the entity and layer perspectives, it is best described in its own taxonomy.…”

Section: Improved Versionmentioning

confidence: 99%

Towards an Improved Taxonomy of Attacks Related to Digital Identities and Identity Management Systems

Pöhn

Hommel

2023

Security and Communication Networks

View full text Add to dashboard Cite

Digital transformation with the adoption of cloud technologies, outsourcing, and working-from-home possibilities permits flexibility for organizations and persons. At the same time, it makes it more difficult to secure the IT infrastructure as the IT team needs to keep track of who is accessing what data from where and when on which device. With these changes, identity management as a key element of security becomes more important. Identity management relates to the technologies and policies for the identification, authentication, and authorization of users (humans and devices) in computer networks. Due to the diversity of identity management (i.e., models, protocols, and implementations), different requirements, problems, and attack vectors need to be taken into account. In order to secure identity management systems with their identities, a systematic approach is required. In this article, we propose the improved framework Taxonomy for Identity Management related to Attacks (TaxIdMA). The purpose of TaxIdMA is to classify existing attacks, attack vectors, and vulnerabilities associated with system identities, identity management systems, and end-user identities. In addition, the background of these attacks can be described in a structured and systematic way. The taxonomy is applied to the Internet of Things and self-sovereign identities. It is enhanced by a description language for threat intelligence sharing. Last but not least, TaxIdMA is evaluated and improved based on expert interviews, statistics, and discussions. This step enables broader applicability and level of detail at the same time. The combination of TaxIdMA, which allows a structured way to outline attacks and is applicable to different scenarios, and a description language for threat intelligence helps to improve the security identity management systems and processes.

show abstract

Harmonization in eProcurement: Design of a Holistic Solution Model for Pre-award Procedures

Schmitz,

Siapera,

Prentza

et al. 2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Re-Shaping the EU Digital Identity Framework

Cited by 5 publications

References 21 publications

Analyzing the Threats to Blockchain-Based Self-Sovereign Identities by Conducting a Literature Survey

Analyzing the Threats to Blockchain-Based Self-Sovereign Identities by Conducting a Literature Survey

Towards an Improved Taxonomy of Attacks Related to Digital Identities and Identity Management Systems

Harmonization in eProcurement: Design of a Holistic Solution Model for Pre-award Procedures

Contact Info

Product

Resources

About