Identity Management: State of the Art, Challenges and Perspectives - Privacy and Identity Management. Data for Better Living: AI and Privacy Access content directly
Conference Papers Year : 2020

Identity Management: State of the Art, Challenges and Perspectives

Tore Kasper Frederiksen
  • Function : Author
  • PersonId : 1113478
Julia Hesse
  • Function : Author
  • PersonId : 1113479
Anja Lehmann
  • Function : Author
  • PersonId : 1113480
Rafael Torres Moreno
  • Function : Author
  • PersonId : 1113481

Abstract

Passwords are still the primary means for achieving user authentication online. However, using a username-password combination at every service provider someone wants to connect to introduces several possibilities for vulnerabilities. A combination of password reuse and a compromise of an iffy provider can quickly lead to financial and identity theft. Further, the username-password paradigm also makes it hard to distribute authorized and up-to-date attributes about users; like residency or age. Being able to share such authorized information is becoming increasingly more relevant as more real-world services become connected online. A number of alternative approaches such as individual user certificates, Single Sign-On (SSO), and Privacy-Enhancing Attribute-Based Credentials (P-ABCs) exist. We will discuss these different strategies and highlight their individual benefits and shortcomings. In short, their strengths are highly complementary: P-ABC based solutions are strongly secure and privacy-friendly but cumbersome to use; whereas SSO provides a convenient and user-friendly solution, but requires a fully trusted identity provider, as it learns all users’ online activities and could impersonate users towards other providers.The vision of the Olympus project is to combine the advantages of these approaches into a secure and user-friendly identity management system using distributed and advanced cryptography. The distributed aspect will avoid the need of a single trusted party that is inherent in SSO, yet maintain its usability advantages for the end users. We will sketch our vision and outline the design of Olympus’ distributed identity management system.
Fichier principal
Vignette du fichier
496005_1_En_4_Chapter.pdf (736.33 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03378952 , version 1 (14-10-2021)

Licence

Attribution

Identifiers

Cite

Tore Kasper Frederiksen, Julia Hesse, Anja Lehmann, Rafael Torres Moreno. Identity Management: State of the Art, Challenges and Perspectives. 14th IFIP International Summer School on Privacy and Identity Management (Privacy and Identity), Aug 2019, Windisch, Switzerland. pp.45-62, ⟨10.1007/978-3-030-42504-3_4⟩. ⟨hal-03378952⟩
109 View
49 Download

Altmetric

Share

Gmail Facebook X LinkedIn More