Identity Management Systems Research Articles

Privacy-enhanced distributed revocable identity management scheme based self-sovereign identity

In recent years, the rapid proliferation of digital services and resources on Industrial Internet has imposed higher demands on universality and privacy of identity management. Particularly with the advent of the digital economy, prudent users are urged to maintain control over their digital identity credentials. However, traditional identity management methods have failed to meet this requirement and thus have been prone to raise users' concerns about potential financial loss. Specifically, conventional identity management systems(IDMS) have been plagued by imperceptible privacy disclosure, which derives from the flaws in single points of failure, excessive disclosure, correlation analysis, traceability, and revocation. The emerging Self-Sovereign Identity (SSI) architecture aims to tackle these issues and is propelling the evolution of privacy-enhanced distributed identity management. To this end, we proposed a privacy-enhanced distributed identity management scheme with sequential aggregate issuance, threshold traceability and revocability in the setting of multiple credential issuers and regulators. We adopted the Decentralized identifiers(DIDs) and verifiable credentials(VCs) based on the SSI architecture to ensure the hierarchical identity authentication. The security and performance analysis shows that our proposal achieves the desired design goals and is feasible for distributed Industrial Internet.

Improving the performance of IoT devices that use Wi-Fi

<p>Providing quality service to users of the internet of things (IoT) entails addressing two crucial aspects: one related to security and the other concerning the limited resources of IoT devices. We will face a challenge while using timesensitive applications within a network that utilizes a high-performance Wi-Fi technology with exceeding energy consumption. Due to this research challenge, we propose a new algorithm, IoT-quality of service (QoS), designed to achieve a true balance between enhancing the security aspects of IoT devices and improving network-hardware performance. Thus, the algorithm efficiently manages the limited energy resources by monitoring energy levels, communication quality, and queuing delay at access points. This is accomplished by utilizing a streamlined identity management system capable of achieving authentication and access authorization with reduced loading for IoT devices. The research hypothesis underwent validation through a comparative analysis of its performance against the conventional model of a Wi-Fi-based IoT device. This evaluation was conducted utilizing the NS3 simulator and was based on a predetermined set of parameters influencing the examined performance metrics, including power consumption, throughput, delay, and response time. The findings exposed the superiority of the proposed algorithm.</p>

ARTIFICIAL INTELLIGENCE ENHANCED IDENTITY AND ACCESS MANAGEMENT PREVENTING UNAUTHORIZED ACCESS IN MODERN ENTERPRISES

As enterprises increasingly migrate to digital platforms, securing systems from unauthorized access becomes crucial to safeguarding sensitive data. Identity and Access Management (IAM) systems have traditionally been implemented to manage user access and authenticate identities. However, with growing threats of sophisticated cyber-attacks, traditional IAM methods are proving inadequate. Artificial Intelligence (AI) has emerged as a transformative force in enhancing IAM systems by providing adaptive, intelligent solutions to prevent unauthorized access. This paper explores the role of AI-enhanced IAM in modern enterprises, emphasizing its ability to predict, detect, and respond to potential security breaches. Through a detailed examination of current AI applications in IAM, this study demonstrates how AI-enabled tools can increase security resilience, reduce false positives, and automate responses to evolving threats, thus offering enterprises a proactive defense against unauthorized access.

Data Sharing Control with Blockchain-Based Self-Sovereign Identity Management System

Data Sharing Control with Blockchain-Based Self-Sovereign Identity Management System

Risky identities: Digital identity challenges for stateless Rohingya in first asylum states

This article presents a case study of the Tracking Refugees Information System (TRIS) that has been introduced in Malaysia for undocumented migrants and refugees, including the large Rohingya population being hosted in the country. It argues that the TRIS digital identity management system for Rohingya and other refugees in Malaysia in this period potentially shifts these groups from the protection of UNHCR to a new national surveillance project and fundamentally changes their status. The article highlights possible risks and concerns attached to such a digital ID system, and provides a contextual history of the evolution of dispossession of the Rohingya of identity documents in their own homeland as well as issues that have emerged concerning digital identity issuance in other asylum states.

Enhancing Cybersecurity with Blockchain-based Identity Management

In the digital age, the rapid increase in cyber threats has highlighted the need for more robust and secure identity management systems. Traditional centralized identity management systems are often vulnerable to data breaches, unauthorized access, and identity theft, posing significant risks to individuals and organizations. This paper explores the potential of blockchain technology to enhance cybersecurity through decentralized identity management. By leveraging the inherent properties of blockchain—such as immutability, transparency, and decentralization—blockchain-based identity management systems offer a more secure and efficient alternative to traditional methods. The paper provides an in-depth analysis of how blockchain can be utilized to store and manage digital identities securely, reducing the risk of identity fraud and data breaches. It examines various blockchain-based identity management frameworks, highlighting their advantages and potential challenges in implementation. Furthermore, the study discusses the integration of blockchain with other emerging technologies, such as cryptographic algorithms and smart contracts, to create a more resilient cybersecurity infrastructure. Through a review of current literature and case studies, the paper demonstrates the effectiveness of blockchain in enhancing data security and privacy while promoting user control over personal information. The findings suggest that adopting blockchain-based identity management could significantly mitigate cybersecurity threats and enhance trust in digital transactions. However, the paper also acknowledges the need for addressing scalability, regulatory compliance, and interoperability issues to fully realize the potential of blockchain in cybersecurity. This research contributes to the growing body of knowledge on innovative cybersecurity solutions and provides a foundation for future studies in the field.

Optimizing Identity Management: Key Strategies for Effective Governance and Administration

The significance of identity management has escalated in today's digital environment, where sensitive information is frequently at risk of breaches and unauthorized access. This research aims to investigate the best governance and administrative practices to enhance identity management systems, with a focus on security, privacy, and usability. By analyzing current industry standards, regulations, and technological advancements, the study intends to provide valuable insights for organizations seeking to improve their identity management capabilities. The research employs a mixed-methods approach, combining quantitative surveys and data analysis with qualitative interviews, to achieve a comprehensive understanding of current practices and challenges in identity governance and administration. Key components such as authentication, authorization, and access control are examined, with practical recommendations provided to enhance identity management strategies. The study emphasizes the importance of adopting role-based access control (RBAC), continuous monitoring and compliance, identity lifecycle management, and integrating identity governance with IT infrastructure. Additionally, it highlights the significance of effective password management, robust authentication measures, and the implementation of Single Sign-On (SSO) solutions to improve security and user experience. The research also underscores the critical role of data encryption and protection measures in safeguarding sensitive information and mitigating data breach risks. By adhering to best practices in identity management, organizations can strengthen their overall cybersecurity posture, ensure regulatory compliance, and build trust among stakeholders in an increasingly complex digital landscape.

Integration of an Open Source Identity Management System in Educational Platforms

Making research advances available to the community in the shape of open source software has the potential to introduce cutting-edge innovations from early on, foster collaborative development, and revolutionize industrial applications. However, including open source software resulting from a research project as part of a production system poses some risks and must be evaluated in detail, considering all pros and cons. This is especially delicate when that piece of software is in charge of authentication and authorization. This article reports on an experience of integrating open source identity and access management (IAM) software that is the result of multiple research projects, the FIWARE Keyrock IAM, into three educational web-based platforms: two learning object repositories and a course management platform. We intend to draw the lessons learned from this experience so they can guide software practitioners when deciding if they should integrate open source software developed in research projects.

SIoT identity management with the ability to preserve owner privacy and built‐in resistance to Sybil attacks

SummaryThe Social Internet of Things (SIoT) allows for more efficient and intelligent communication between entities (humans and objects). Managing the digital identity of objects, protecting the owner's privacy, and resisting impersonation attacks are crucial challenges in SIoT. On the other hand, the classic centralized identity provider servers contain valuable information for hackers and malicious parties. Effective solutions can be presented using decentralized technologies such as blockchains. This paper proposes a decentralized identity management system for SIoT based on smart contract technology. This system drives object identity control; conversely, a zero‐knowledge‐based protocol and double‐spend prevention ideas are proposed for privacy preservation and Sybil attack resistance, respectively. The central idea is to implement self‐sovereign identity (SSI) so that even certifiers are not privy to object‐sensitive information. Additionally, it attempts to prevent the owner from creating Sybil objects using the web of trust method. The method's scalability and convergence can be proven by considering all acknowledgment nodes and different paths. This method was compared with the most novel available methods; the results from this comparison depict the scalability and effectiveness of the proposed method for large networks.

Decentralization of Identity using Ethereum and IPFS

Introduction: The Identity of a user in digital world is an important factor for an individual. Identity management has been handled by various models which, over the period of time have been prone various security breaches. The foremost integral part of any identity model is the centralized storage, access of data. Considering this, in recent years, there has been evolution from centralization to de-centralization of Identity management. With respect to this new aspect, this paper proposes a solution to the centralized management problems, as a decentralized Identity Management System. The said approach utilizes Ethereum blockchain, IPFS, both supporting distributed data accessibility and data storage respectively. This paper also sheds light on the W3C specification of DID (De-centralized Identifier) which supports the Self-Sovereign Identity principles of Identity Management and are vital for de-centralization of Identity Management

Decentralized Identity Verification in Metaverse Auditing Using Blockchain Technology

This research paper presents a comprehensive review of decentralized identity verification in the context of metaverse auditing, leveraging blockchain technology. With the rapid evolution of virtual environments and the emergence of the metaverse, ensuring trust, transparency, and security becomes paramount. Traditional centralized identity verification systems face challenges in such decentralized and dynamic environments. Blockchain technology offers promising solutions by providing a transparent, immutable, and decentralized ledger for identity management and verification. Conceptual Analysis research methodology used in this research paper because theoretical and conceptual clarity are crucial for understanding complex phenomena. The paper begins by exploring the concept of decentralized identity management systems and their significance in virtual environments. It discusses various challenges associated with traditional identity verification methods and highlights the potential of blockchain-based solutions in addressing these challenges. Through a systematic literature review, the paper examines existing research and developments in decentralized identity verification, metaverse auditing, and blockchain technology. Key topics covered include the architecture of decentralized identity systems, consensus mechanisms for identity verification on blockchain networks, privacy-preserving techniques, and interoperability standards for cross-platform identity management. Furthermore, the paper investigates the role of smart contracts and decentralized applications (DApps) in facilitating identity verification processes within the metaverse. The review also discusses the potential implications of decentralized identity verification in enhancing trust and security in virtual economies, enabling seamless user experiences, and fostering innovation in digital asset management. Moreover, it identifies current gaps and challenges in the field and proposes future research directions to address these issues. Overall, this research paper contributes to the understanding of decentralized identity verification in metaverse auditing using blockchain technology. It serves as a valuable resource for researchers, practitioners, and policymakers interested in exploring the intersection of decentralized identity, virtual environments, and blockchain technology. The insights provided aim to stimulate further research and innovation in this rapidly evolving domain.

Analyzing the Role of Blockchain in Identity and Access Management Systems

In today's digital world, protecting identities and securing access to sensitive data are crucial tasks. Traditional centralized Identity and Access Management (IAM) systems are vulnerable to data breaches and unauthorized intrusions. Blockchain technology has emerged as a promising solution to bolster IAM systems by decentralizing control and enhancing security measures. This paper explores the integration of blockchain technology into IAM frameworks to address the shortcomings of centralized systems. It examines the fundamental principles of blockchain, highlighting its immutability, decentralization, and cryptographic security features. By leveraging these attributes, blockchain-based IAM systems offer a robust infrastructure for identity verification, authentication, and authorization processes. Various use cases of blockchain in IAM are discussed, including self-sovereign identity, decentralized authentication protocols, and secure data sharing mechanisms. The paper elucidates how blockchain enhances trust and transparency in identity management, granting individuals greater control over their personal data while ensuring privacy and security. It also scrutinizes the challenges and considerations associated with implementing blockchain-based IAM solutions, such as scalability, interoperability, and regulatory compliance. Additionally, the paper explores potential future developments and trends in this evolving field, emphasizing the importance of collaboration between industry stakeholders and regulatory bodies to foster innovation while addressing security and privacy concerns. In summary, this paper underscores the transformative potential of blockchain technology in fortifying IAM systems, leading to a more secure and resilient digital ecosystem.

A Multi-task Adversarial Attack Against Face Authentication

Deep-learning-based identity management systems, such as face authentication systems, are vulnerable to adversarial attacks. However, existing attacks are typically designed for single-task purposes, which means they are tailored to exploit vulnerabilities unique to the individual target rather than being adaptable for multiple users or systems. This limitation makes them unsuitable for certain attack scenarios, such as morphing, universal, transferable, and counter attacks. In this paper, we propose a multi-task adversarial attack algorithm called MTADV that are adaptable for multiple users or systems. By interpreting these scenarios as multi-task attacks, MTADV is applicable to both single- and multi-task attacks, and feasible in the white- and gray-box settings. Furthermore, MTADV is effective against various face datasets, including LFW, CelebA, and CelebA-HQ, and can work with different deep learning models, such as FaceNet, InsightFace, and CurricularFace. Importantly, MTADV retains its feasibility as a single-task attack targeting a single user/system. To the best of our knowledge, MTADV is the first adversarial attack method that can target all of the aforementioned scenarios in one algorithm.

MetaSSI: A Framework for Personal Data Protection, Enhanced Cybersecurity and Privacy in Metaverse Virtual Reality Platforms

The Metaverse brings together components of parallel processing computing platforms, the digital development of physical systems, cutting-edge machine learning, and virtual identity to uncover a fully digitalized environment with equal properties to the real world. It possesses more rigorous requirements for connection, including safe access and data privacy, which are necessary with the advent of Metaverse technology. Traditional, centralized, and network-centered solutions fail to provide a resilient identity management solution. There are multifaceted security and privacy issues that hinder the secure adoption of this game-changing technology in contemporary cyberspace. Moreover, there is a need to dedicate efforts towards a secure-by-design Metaverse that protects the confidentiality, integrity, and privacy of the personally identifiable information (PII) of users. In this research paper, we propose a logical substitute for established centralized identity management systems in compliance with the complexity of the Metaverse. This research proposes a sustainable Self-Sovereign Identity (SSI), a fully decentralized identity management system to mitigate PII leaks and corresponding cyber threats on all multiverse platforms. The principle of the proposed framework ensures that the users are the only custodians and proprietors of their own identities. In addition, this article provides a comprehensive approach to the implementation of the SSI principles to increase interoperability and trustworthiness in the Metaverse. Finally, the proposed framework is validated using mathematical modeling and proved to be stringent and resilient against modern-day cyber attacks targeting Metaverse platforms.

Enhancing threat detection in Identity and Access Management (IAM) systems

Identity and Access Management (IAM) systems play a pivotal role in safeguarding organizational resources by controlling access to sensitive information. However, these systems face evolving threats that can compromise security and privacy. This paper proposes a comprehensive approach to enhance threat detection within IAM systems. By integrating advanced techniques such as anomaly detection, machine learning, and behavior analysis, organizations can better identify and respond to suspicious activities. This paper discusses the challenges associated with threat detection in IAM systems and presents practical solutions to mitigate these risks. Furthermore, the paper highlights the importance of continuous monitoring and adaptation effectively combat emerging threats.

Blockchain Enabled Social Network for Detecting Fake Accounts

Front end technology with permanent accounts is employed in online social networks to help people get to know one another. In an effort to maintain connection with everyone, Facebook and Twitter are changing along with the users. OSNs are used by them for planning events, news exchange, interpersonal communication, and even running their own online enterprises. Because of OSNs' quick growth and the abundance of personal data that its users have shared, attackers and imposters have been lured to them with the intention of stealing personal information, spreading disruptive activities, and publishing false information. A further rationale for creating fictitious profiles for hateful accounts. In an attempt to harm the reputation of the person they detest, these users make profiles using their usernames and publish photographs and articles that aren't related to them. to use blockchain technology, Aadhar number verification, and SVM profile classification to create a reliable solution for detecting phoney social network profiles. By analysing several aspects of social media profiles, the SVM classification uses machine learning to discern between real and fraudulent accounts. By verifying Aadhar numbers through legitimate channels, Aadhar number verification is integrated into the registration process, guaranteeing the authenticity of user identities. A decentralised and secure identity management system is made possible by the use of blockchain technology, with smart contracts providing immutable storage for verified user data.

Decentralized Identity Authentication Mechanism: Integrating FIDO and Blockchain for Enhanced Security

FIDO (Fast Identity Online) is a set of network identity standards established by the FIDO Alliance. It employs a framework based on public key cryptography to facilitate multi-factor authentication (MFA) and biometric login, ensuring the robust protection of personal data associated with cloud accounts and ensuring the security of server-to-terminal device protocols during the login process. The FIDO Alliance has established three standards: FIDO Universal Second Factor (FIDO U2F), FIDO Universal Authentication Framework (FIDO UAF), and the Client to Authenticator Protocols (CTAP). The newer CTAP, also known as FIDO2, integrates passwordless login and two-factor authentication. Importantly, FIDO2’s support for major browsers enables users to authenticate their identities via FIDO2 across a broader range of platforms and devices, ushering in the era of passwordless authentication. In the FIDO2 framework, if a user’s device is stolen or compromised, then the private key may be compromised, and the public key stored on the FIDO2 server may be tampered with by attackers attempting to impersonate the user for identity authentication, posing a high risk to information security. Recognizing this, this study aims to propose a solution based on the FIDO2 framework, combined with blockchain technology and access control, called the FIDO2 blockchain architecture, to address existing security vulnerabilities in FIDO2. By leveraging the decentralized nature of the blockchain, the study addresses potential single points of failure in FIDO2 server centralized identity management systems, thereby enhancing system security and availability. Furthermore, the immutability of the blockchain ensures the integrity of public keys once securely stored on the chain, effectively reducing the risk of attackers impersonating user identities. Additionally, the study implements an access control mechanism to manage user permissions effectively, ensuring that only authorized users can access corresponding permissions and preventing unauthorized modifications and abuse. In addition to proposing practical solutions and steps, the study explains and addresses security concerns and conducts performance evaluations. Overall, this study brings higher levels of security and trustworthiness to FIDO2, providing a robust identity authentication solution.

USER CENTRIC APPROACH TO IDENTITY MANAGEMENT IN CLOUD COMPUTING ENVIRONMENT: AN EMPIRICALLY TESTED FRAMEWORK

Most of the commercial identity management models have focused on the perspective of service providers and given a preference to the challenges faced by the service providers. However, with the growing number of concerns, an identity management system with strong focus on the user’s concerns is required. A User Centric Approach for Identity Management (UCAId) for Cloud Computing in SaaS Environment has been presented in this paper. The proposed UCAId model considers user at the central position to improve their experience and increase adaptability of the cloud. Comprehensive literature review has been carried out to identify the most important parameters of the User Centric Identity management. Provisioning, privacy, security, scalability and trust have been identified as the five most parameters and further the model presents these parameters built-up on the strength of eight components each, individually. The model has been empirically tested to see its user adoption on a set Indian users with varied demographics. Data has been collected using a structured questionnaire and Principal Component Analysis has been used to analyze this primary data.

A survey on blockchain deployment for biometric systems

AbstractBlockchain technology has become an emerging area in recent years due to its capacity to improve the security, dependability, and resilience of distributed systems. Research based on this technique has impacted several firms, including banking, healthcare, data processing, remote sensing, and many others. The key characteristics of blockchain technology that make it appealing are data immutability, transparency, privacy, decentralization, and distributed ledgers. However, there is a chance of a privacy breach with sensitive biometric data. The purpose of this investigation is to examine blockchain‐based biometric applications research. It begins by determining the myriad ways that biometrics and blockchain may work together, including the storage and protection of biometric templates, identity management, and biometric authentication systems. Different biometric applications with respect to blockchain technology are also identified, along with the types of biometric data taken into account, features and capabilities of blockchain technology exploited, and blockchain technology frameworks employed. Finally, the authors seek to investigate blockchain concepts in the biometric domain by evaluating their pros and cons and summarizing the methods developed on blockchain for diverse biometric applications. Additionally, the applications of blockchain‐based biometric systems are highlighted before moving on to open research questions and potential future research areas.

A Model Apporach for Identity and Access Management (IAM) System in the Cloud

Through use of cloud computing, information may be accessible from a range of different types of devices. It is now possible to communicate with a company at any time or location, regardless of location or time zone. Using the cloud has a number of advantages, some of which include lower expenditures on information technology and infrastructure expenses, more agility, and improved continuity planning. These benefits can only be attained via the implementation of a reliable identity and access control system for cloud applications and services. Managing these identities and limiting the access that cloud clients and applications have continues to be a significant challenge in the modern day. In order to strengthen the protection offered by a venture, it is necessary to set up a trust worthy identity and access management (IAM) system in the cloud. The findings of this study provide an intelligent and reliable IAM system that is based on cloud computing.