DNS-IdM: A Blockchain Identity Management System to Secure Personal Data Sharing in a Network
Source abstract
Abstract
Identity management (IdM) is a method used to determine user identities. The centralized aspect of IdM introduces a serious concern with the growing value of personal information, as well as with the General Data Protection Regulation (GDPR). The problem with currently-deployed systems and their dominating approach, with identity providers (IdP) and single-point services, is that a third party is in charge of maintaining and controlling the personal data. The main challenge to manage data securely lies in trusting humans and institutes who are responsible for controlling the entire activity. Identities are not owned by the rightful owners or the user him/herself, but by the mentioned providers. With the rise of blockchain technology, self-sovereign identities are in place utilizing decentralization; unfortunately, the flaws still exist. In this research, we propose DNS-IdM, a smart contract-based identity management system that enables users to maintain their identities associated with certain attributes, accomplishing the self-sovereign concept. DNS-IdM has promising outcomes in terms of security and privacy. Due to the decentralized nature, DNS-IdM is able to avoid not only the conventional security threats, but also the limitations of the current decentralized identity management systems.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · Privacy, Security, and Data Protection · Privacy-Preserving Technologies in Data
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Computing, Engineering and Physical Sciences, University of the West of Scotland, High Street, Paisley PA1 2BE, UK
References (46)
Show source-provided references
1. Domingo, A.I.S., and Enríquez, Á.M. (2018). Digital Identity: The Current State of Affairs, BBVA Research.
2. Smedinghoff, T.J. (2019, March 01). Introduction to Online Identity Management; 2008. Available online: https://www.uncitral.org/pdf/english/colloquia/EC/Smedinghoff_Paper_-_Introduction_to_Identity_Management.pdf.
3. Fett, D., Küsters, R., and Schmitz, G. (2017, January 21–25). The Web SSO Standard OpenID Connect: In-depth Formal Security Analysis and Security Guidelines. Proceedings of the 2017 IEEE 30th Computer Security Foundations Symposium (CSF), Santa Barbara, CA, USA.10.1109/CSF.2017.20 ↗
4. A Survey Paper on Social Sign-On Protocol OAuth 2.0
5. Simons, A. (2015). Microsoft Passport and Azure AD: Eliminating Passwords One Device at a Time, Microsoft. Available online: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Microsoft-Passport-and-Azure-AD-Eliminating-passwords-one-device/ba-p/244030.
6. A security analysis of OpenID10.1007/978-3-642-17303-5_6 ↗
7. Roda, M. (2015). Federated Security Domains with SAS and SAML, SAS Institute Inc.. Available online: https://support.sas.com/resources/papers/proceedings15/SAS1385-2015.pdf.
8. Oppliger, R., Gajek, S., and Hauser, R. (March, January 26). Security of Microsoft’s Identity Metasystem and CardSpace. Proceedings of the Communication in Distributed Systems—15. ITG/GI Symposium, Bern, Switzerland.
9. Chuen, D.L.K., and Deng, R. (2018). Blockchain 101: An Introduction to the Future. Handbook of Blockchain, Digital Finance, and Inclusion, Academic Press.
10. Blockchain Technology for Healthcare: Facilitating the Transition to Patient-Driven Interoperability10.1016/j.csbj.2018.06.003 ↗
11. A Review on the Use of Blockchain for the Internet of Things10.1109/ACCESS.2018.2842685 ↗
12. Salah, K., and Ahmad Khan, M. (2017). IoT Security: Review, Blockchain Solutions, and Open Challenges. Future Gener. Comput. Syst.
13. Verma, D., Desai, N., Preece, A.D., and Taylor, I. (2017). A blockchain based architecture for asset management in coalition operations. Proc. SPIE.10.1117/12.2264911 ↗
14. Zakhary, V., Amiri, M.J., Maiyya, S., Agrawal, D., and El Abbadi, A. (2019). Towards Global Asset Management in Blockchain Systems. arXiv.
15. BIDaaS: Blockchain Based ID As a Service10.1109/ACCESS.2017.2782733 ↗
16. Commission, E. (2018). A New Era for Data Protection in the EU, European Commission.
17. Nabi, A.G. (2017). Comparative Study on Identity Management Methods Using Blockchain. [Ph.D. Thesis, University of Zurich].
18. A First Look at Identity Management Schemes on the Blockchain10.1109/MSP.2018.3111247 ↗
19. Preuveneers, D., Rimmer, V., Tsingenopoulos, I., Spooren, J., Joosen, W., and Ilie-Zudor, E. (2018). Chained Anomaly Detection Models for Federated Learning: An Intrusion Detection Case Study. Appl. Sci., 8.10.3390/app8122663 ↗
20. Yang, J., Onik, M.M.H., Lee, N.Y., Ahmed, M., and Kim, C.S. (2019). Proof-of-Familiarity: A Privacy-Preserved Blockchain Scheme for Collaborative Medical Decision-Making. Appl. Sci., 9.10.3390/app9071370 ↗
21. Khezr, S., Moniruzzaman, M., Yassine, A., and Benlamri, R. (2019). Blockchain Technology in Healthcare: A Comprehensive Review and Directions for Future Research. Appl. Sci., 9.10.3390/app9091736 ↗
22. (2018). The Inevitable Rise of Self-Sovereign Identity, Sovrin Foundation. Technical Report.
23. Davos-Klosters (2018). Digital Identity: On the Threshold of a Digital Identity Revolution, World Economic Forum.
24. Cheetham, M. (2013). Digital Identity: An Introduction, Piran Partners. Technical Report.
25. Ferdous, M.S., and Poet, R. (2012, January 2–6). A comparative analysis of Identity Management Systems. Proceedings of the 2012 International Conference on High Performance Computing Simulation (HPCS), Madrid, Spain.10.1109/HPCSim.2012.6266958 ↗
26. Borrows, M., Harwich, E., and Heselwood, L. (2017). The Future of Public Service Identity: Blockchain, Reform Research Trust.
27. (2018). A Protocol and Token for Self-Sovereign Identity and Decentralized Trust, Sovrin Foundation. Technical Report.
28. Critical Issues in Identity Management—Challenges for Homeland Security
29. The Seven Flaws of Identity Management: Usability and Security Challenges10.1109/MSP.2008.49 ↗
30. Miculan, M., and Urban, C. (2011, January 22–28). Formal analysis of Facebook Connect Single Sign-On authentication protocol. Proceedings of the Student Research Forum of 37th International Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM 2011), Nový Smokovec, Slovakia.
31. (2017). Snapshot of Technical Standards for Digital Identity Systems Technical Standards for Digital Identity, World Bank Group.
32. Sayeed, S., and Marco-Gisbert, H. (2018, January 18–22). On the Effectiveness of Blockchain against Cryptocurrency Attacks. Proceedings of the UBICOMM 2018, the Twelfth International Conference on Mobile Ubiquitous Computing, Systems, Services and Technologies, Athens, Greece.
33. Wood, D. (2019, March 21). Ethereum: A Secure Decentralised Generalised Transaction Ledger. Available online: https://gavwood.com/paper.pdf.
34. Triantafyllidis, N.P. (2016). Developing an Ethereum Blockchain Application. [Ph.D. Thesis, University of Amsterdam].
35. Sayeed, S., and Marco-Gisbert, H. (2019). Assessing Blockchain Consensus and Security Mechanisms against the 51% Attack. Appl. Sci., 9.10.3390/app9091788 ↗
36. (2018). Blockchain’s Scaling Problem, Explained, Cointelegraph.
37. (2019, April 21). Available online: https://medium.com/connext/the-case-for-ethereum -scalability-d2a8035f880f.
38. Lundkvist, C., Heck, R., Torstensson, J., Mitton, Z., and Sena, M. (2016). UPort: A Platform for Self-Sovereign Identity, The BlockchainHub.
39. Alpár, G., Hoepman, J., and Siljee, J. (2011). The Identity Crisis. Security, Privacy and Usability Issues in Identity Management. arXiv.
40. Kalodner, H.A., Carlsten, M., Ellenbogen, P., Bonneau, J., and Narayanan, A. (2015). An Empirical Study of Namecoin and Lessons for Decentralized Namespace Design, WEIS.
41. (2019, March 03). Blockverify. Available online: https://gust.com/companies/blockverify.
42. (2019, March 07). Cambridge Blockchain. Available online: https://www.cambridge-blockchain.com/.
43. Nizamuddin, N., Hasan, H., and Salah, K. (2018). IPFS-Blockchain-Based Authenticity of Online Publications, Springer International Publishing.10.1007/978-3-319-94478-4_14 ↗
44. (2016). uPort: A Platform for Self-Sovereign Identity, Blockchain Lab.
45. (2019, March 09). What Is Sovrin?. Available online: https://sovrin.org/faq/what-is-sovrin-2/.
46. (2016). Travel Identity of the Future—White Paper, ShoCard. Technical Report.