VAIM: Verifiable Anonymous Identity Management for Human-Centric Security and Privacy in the Internet of Things

Abstract

The human internet of things (HIoT) is a promising trend that adopts a user-centered vision to improve life quality by interacting with heterogeneous physical and virtual entities and the internet. However, It refers to exchanging contextual data between collaborative entities that raise privacy concerns. Emerging blockchain technology allows a digital identity management system (IDM) to be deployed in it, which largely alleviates the problems caused by the centralized third party. Still, its inherent transparency and lack of privacy pose a considerable challenge to IDM. We propose verifiable anonymous identity management (VAIM) connecting privacy channels between users by constructing identity verification and access control provisioning via user-centric decisions and an anonymous identity management system. This work has the following contributions: (1) We establish a novel IDM system by analyzing the existing scheme. In this regard, we improve the traditional claim identity model in blockchain by implementing zero-knowledge proof (ZKP) algorithms to achieve identity unlinkability, essentially preventing the disclosure of attribute ownership. (2) We implement a system that includes blind ordered multi-signature (BOMS) protocol, which allows users to processes efficiently and trusts the verification of anonymous transactions. (3) Finally, specific ZKP-based algorithm (commonly used practical ZKP such as Camenisch and Lysyanskaya signature (CL-Signature) and zero-knowledge succinct non-interactive argument of knowledge (ZK-SANRKS)) implementation and various environment performance evaluation and security analysis show that our scheme achieves efficient privacy protection and a broader application scope compared with the prior model. To the best of our knowledge, existing zero-knowledge proof-based IDM has not developed or compared each scheme before.INDEX TERMS Anonymous identity management, Human-centric internet of things, membership service provider, privacy, verifiable credential.

Editable and Verifiable Anonymous Authentication Incorporating Blockchain in the Internet of Energy

“…Zero-knowledge succinct non-interactive argument of knowledge (ZK-SNARKs) and Camenisch-Lysyanskaya signature (CL-Signature) based zero-knowledge proof (ZKP) are representative schemes that provide strong anonymity in the process of identity authentication. ZK-SNARKs [28] can generate concise proofs that can be efficiently verified. CL-Signature [29] can verify the integrity of the verification information provided by the certifier without disclosing the original information.…”

“…CL-Signature [29] can verify the integrity of the verification information provided by the certifier without disclosing the original information. RA [28] et al proposed verifiable anonymous identity management for human-centric security and privacy in IoT based on ZK-SNARKs. In order to realize the user's supervision, combined with anonymous authentication technology, zero-knowledge proof, and group signature, a supervised anonymous authentication scheme suitable for blockchain system is proposed [21].…”

“…Compared with the ZK-SNARKs [28] and CL signatures [29] mentioned in the existing VAIM scheme, the results given by this scheme are shown in Figure 3. ZK-SNARKs [28], CL signatures [29], and the CH signature verification time based on the proposed scheme will all increase with the increase of the number of users.…”

“…Compared with the ZK-SNARKs [28] and CL signatures [29] mentioned in the existing VAIM scheme, the results given by this scheme are shown in Figure 3. ZK-SNARKs [28], CL signatures [29], and the CH signature verification time based on the proposed scheme will all increase with the increase of the number of users. However, it is more obvious that the signature time of ZK-SNARKs [28] and CL signatures [29] change the fastest when the number of users increases from 1 to 5, and increases slowly from 5 to 20.…”

“…ZK-S [28], CL signatures [29], and the CH signature verification time based on the p scheme will all increase with the increase of the number of users. However, it obvious that the signature time of ZK-SNARKs [28] and CL signatures [29] cha fastest when the number of users increases from 1 to 5, and increases slowly from The signature verification time of the proposed scheme in this paper is relative with the growth of the number of users. Compared with other schemes, the effic the proposed scheme is higher and the signature verification time is shorter.…”