Please enable JavaScript.

Coggle requires JavaScript to display documents.

SELF-SOVEREIGN IDENTITY - Coggle Diagram

- - - - User-centric claim-based identity operation model based on use cases to handle researcher identity in the cloud CDM.
      - Access Control based on capability represented as a credential. => CAPABILITY BASED IDM + AC
      - Prototype = capability based CDM management system.
      - Health Care + Common Data Model
      - ACCESS CONTROL via VCs (high security) + DID ownership + data integrity via cryptography + data sharing through proofs and verification of VPs
      - Application to Researcher Use-Case = analysis via SSI-based scheme of cloud CDM
      - Basically SSI workflow (attributes in VC for AC)
      - Implementation + Experimental Setup
    - - SSI + AC technology
      - Enterprise environment
      - Propose: Self-Sovereign Identity
        Based Access Control (SSIBAC)
        
        AC model for cross-organization IdM = evolution of classical ACM
        
        Leverages conventional AC models and BC
        to provide decentralized auth
        
        Decentralized authentication + centralized authorization
        
        Integration of DIDs and VCs with ABAC(attribute based AC) in federated setting
        
        Transparency and accountability = VC + BC ACMs
        
        Selective disclosure of att and range proofs for numerical values ensure that data is only disclosed on a need-to-know basis
        
        Mapping VCs to AC policies stored at PRP (Policy Retrieval Point)
        
        Proposed model (SSIBAC) can be instantiated using different models, e.g. RBAC or ABAC,
        
        Reusing concepts and mechanisms of underlying models
        
        Application to Real World Use-Case
        
        EU QualityChain project
        
        LIMITATIONS: AC machine is centralized!
      - AC policies does not require storing user sensitive data
      - Prototype implementation and evaluation
      - ZKP = using predicates provides privacy for AC processes
      - SSI provides a model for AUTHRENICATION and ISSUING VCs
        A structured approach to use it for AUTHORIZATION and ACCESS CONTROL is missing.
  - - - Access Management
        with Self-Sovereign Identity
        
        Passing on access rights is effectively prevented
        
        Accelerated assignment of authorizations
        
        User-friendly handling
        
        Data with personal reference remains with the owner
      - Approach
        
        security through blockchain technology and private wallet
        
        Creation of new interfaces
        
        Security and user-friendliness in harmony
- - - - Delegation Use-Case presented in Healthcare scenario