research-article

PrivIdEx: Privacy Preserving and Secure Exchange of Digital Identity Assets.

Authors:

Hasini Gunasinghe,

Dong SuAuthors Info & Claims

WWW '19: The World Wide Web Conference

Pages 594 - 604

https://doi.org/10.1145/3308558.3313574

Published: 13 May 2019 Publication History

Abstract

User's digital identity information has privacy and security requirements. Privacy requirements include confidentiality of the identity information itself, anonymity of those who verify and consume a user's identity information and unlinkability of online transactions which involve a user's identity. Security requirements include correctness, ownership assurance and prevention of counterfeits of a user's identity information. Such privacy and security requirements, although conflicting, are critical for identity management systems enabling the exchange of users' identity information between different parties during the execution of online transactions. Addressing all such requirements, without a centralized party managing the identity exchange transactions, raises several challenges. This paper presents a decentralized protocol for privacy preserving exchange of users' identity information addressing such challenges. The proposed protocol leverages advances in blockchain and zero knowledge proof technologies, as the main building blocks. We provide prototype implementations of the main building blocks of the protocol and assess its performance and security.

References

[1]

E. Androulaki, S. Cocco, and C. Ferris. 2018. Private and confidential transactions with Hyperledger Fabric. https://developer.ibm.com/tutorials/cl-blockchain-private-confidential-transactions-hyperledger-fabric-zero-knowledge-proof/Accessed: 1-Nov-2018.

[2]

M. Andrychowicz, S. Dziembowski, and D. Malinowski. 2014. Secure Multiparty Computations on Bitcoin. In IEEE Symposium on Security and Privacy.

Digital Library

[3]

E. Ben-Sasson, I. Bentov, Y. Horesh, and M. Riabzev. 2018. Scalable, transparent, and post-quantum secure computational integrity. In Cryptology ePrint Archive: Listing for 2018.

[4]

E. Ben-Sasson, A. Chiesa, C. Garman, M. Green, I. Miers, E. Tromer, and M. Virza. 2014. Zerocash: Decentralized Anonymous Payments from Bitcoin. In IEEE Symposium on Security and Privacy.

Digital Library

[5]

David Birch. 2016. Putting identity on the blockchain.http://www.chyp.com/putting-identity-on-the-blockchain-part-1-find-a-problem/.

[6]

D. Boneh. 1998. Twenty Years of Attacks on the RSA Cryptosystem. https://crypto.stanford.edu/%7Edabo/pubs/papers/RSA-survey.pdfAccessed: 22-Sept-2018.

[7]

Luis T.A.N. Brandao, N. Christin, G. Danezis, and Anonymous.2015. Toward Mending Two Nation-Scale Brokered Identification Systems. In Proceedings on Privacy Enhancing Technologies.

[8]

B. Bunz, J. Bootle, D. Boneh, A. Poelstra, P. Wuille, and G. Maxwell. 2018. Zerocash: Decentralized Anonymous Payments from Bitcoin. In IEEE Symposium on Security and Privacy.

[9]

J. Camenisch and A. Lysyanskaya. 2001. An Efficient System for Non-Transferable Anonymous Credentials with Optional Anonymity Revocation. In Proceedings of EUROCRYPT '01. 93-118.

Digital Library

[10]

R. Beaulieu et. al. 2013. The Simon and Speck Families of Lightweight Block Ciphers. https://eprint.iacr.org/2013/404.pdfAccessed: 22-Sept-2018.

[11]

Open Identity Exchange. {n. d.}. OIX - Open Identity Exchange. https://www.openidentityexchange.org/Accessed: 22-Nov-2017.

[12]

Hyperledger Fabric. 2018. A Blockchain Platform for the Enterprise. https://hyperledger-fabric.readthedocs.io/en/release-1.3/Accessed: 16-Oct-2018.

[13]

R. Gennaro, S. Jarecki, H. Krawczyk, and T. Rabin. 2007. Secure Distributed Key Generation Protocol. In J Cryptology.

Digital Library

[14]

R. Gennaro, C. Gentry B. Parno, and M. Raykova. 2013. Quadratic Span Programs and Succinct NIZKs without PCPs. In EUROCRYPT.

[15]

GOV.UK. 2018. Introducing GOV.UK Verify. https://www.gov.uk/government/publications/introducing-govuk-verify/introducing-govuk-verifyAccessed: 22-Sept-2018.

[16]

H. Gunasinghe, A. Kundu, E. Bertino, H. Krawczyk, K. Singh, S. Chari, and D. Su. 2019. PrivIdEx: Privacy Preserving and Secure Exchange of Digital Identity Assets. https://www.cerias.purdue.edu/assets/pdf/bibtex_archive/2019-01.pdfAccessed: 15-Feb-2019.

[17]

Ahmed Kosba. 2017. jsnark. https://github.com/akosba/jsnarkAccessed: 22-Nov-2017.

[18]

A. Kosba, A. Miller, and E. Shi. 2014. Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts. In IEEE Symposium on Security and Privacy.

[19]

S. Nakamoto. 2008. Bitcoin: A Peer-to-Peer Electronic Cash System.

[20]

Nat. 2010. Is Expressing Levels Enough for LOA2+?https://nat.sakimura.org/2010/09/03/is-expressing-levels-enough-for-loa2/Accessed: 22-Sept-2018.

[21]

United States Postal Office. 2014. FCCX Briefing. https://csrc.nist.gov/csrc/media/events/ispab-june-2014-meeting/documents/ispab_jun2014_fccx-briefing_glair.pdfAccessed: 22-Sept-2018.

[22]

OpenID. 2017. Welcome to OpenID Connect. http://openid.net/connect/Accessed: 22-Nov-2017.

[23]

scipr lab. 2017. C++ library for zkSNARKs. https://github.com/scipr-lab/libsnarkAccessed: 22-Nov-2017.

[24]

Prabath Siriwardena. 2017. A Deeper Look Into Bitcoin Internals. https://medium.facilelogin.com/pay-with-bitcoin-to-play-with-a-fidget-spinner-86b7b43414c0Accessed: 22-Sept-2018.

[25]

Prabath Siriwardena. 2017. Identity on Blockchain (Part I). https://medium.facilelogin.com/identity-on-blockchain-part-i-a59d7abe75c0Accessed: 22-Sept-2018.

[26]

sovrin. 2017. Identity For All. https://sovrin.org/Accessed: 22-Nov-2017.

[27]

European Union. 2016. General Data Protection Regulation. https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679Accessed: 22-Sept-2018.

Cited By

Yan ZZhao XLiu YLuo X(2024)Blockchain-driven decentralized identity managementInformation and Management10.1016/j.im.2024.10402661:7Online publication date: 1-Nov-2024
https://dl.acm.org/doi/10.1016/j.im.2024.104026
Oude Roelink BEl‐Hajj MSarmah D(2024)Systematic review: Comparing zk‐SNARK, zk‐STARK, and bulletproof protocols for privacy‐preserving authenticationSECURITY AND PRIVACY10.1002/spy2.401Online publication date: 18-Apr-2024
https://doi.org/10.1002/spy2.401
Tan KChi CLam K(2023)Survey on Digital Sovereignty and Identity: From Digitization to DigitalizationACM Computing Surveys10.1145/361640056:3(1-36)Online publication date: 5-Oct-2023
https://dl.acm.org/doi/10.1145/3616400
Show More Cited By

Recommendations

Privacy preserving of trust management credentials based on trusted computing
ISPEC'10: Proceedings of the 6th international conference on Information Security Practice and Experience

Privacy disclosure of forward direction credentials and backward direction credentials is an important security defect in existing trust management systems. In this paper, a novel distributed privacy preserving scheme for trust management credentials is ...
A Review on Privacy-Preserving Data Mining
CIT '14: Proceedings of the 2014 IEEE International Conference on Computer and Information Technology

Data mining has been widely studied and applied into many fields such as Internet of Things (IoT) and business development. However, data mining techniques also occur serious challenges due to increased sensitive information disclosure and privacy ...
Privacy-preserving topic model for tagging recommender systems

Tagging recommender systems provide users the freedom to explore tags and obtain recommendations. The releasing and sharing of these tagging datasets will accelerate both commercial and research work on recommender systems. However, releasing the ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Other conferences

WWW '19: The World Wide Web Conference

May 2019

3620 pages

ISBN:9781450366748

DOI:10.1145/3308558

Editors:
Ling Liu
Georgia Tech, USA
,
Ryen White
Microsoft Research, USA

Copyright © 2019 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

In-Cooperation

IW3C2: International World Wide Web Conference Committee

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 13 May 2019

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article
Research
Refereed limited

Conference

WWW '19

WWW '19: The Web Conference

May 13 - 17, 2019

CA, San Francisco, USA

Acceptance Rates

Overall Acceptance Rate 1,899 of 8,196 submissions, 23%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

15
Total Citations
View Citations
618
Total Downloads

Downloads (Last 12 months)57
Downloads (Last 6 weeks)4

Reflects downloads up to 27 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

Yan ZZhao XLiu YLuo X(2024)Blockchain-driven decentralized identity managementInformation and Management10.1016/j.im.2024.10402661:7Online publication date: 1-Nov-2024
https://dl.acm.org/doi/10.1016/j.im.2024.104026
Oude Roelink BEl‐Hajj MSarmah D(2024)Systematic review: Comparing zk‐SNARK, zk‐STARK, and bulletproof protocols for privacy‐preserving authenticationSECURITY AND PRIVACY10.1002/spy2.401Online publication date: 18-Apr-2024
https://doi.org/10.1002/spy2.401
Tan KChi CLam K(2023)Survey on Digital Sovereignty and Identity: From Digitization to DigitalizationACM Computing Surveys10.1145/361640056:3(1-36)Online publication date: 5-Oct-2023
https://dl.acm.org/doi/10.1145/3616400
Lu YZhang JQi YQi SLi YSong HLiu Y(2023)Safety Warning! Decentralised and Automated Incentives for Disqualified Drivers Auditing in Ride-Hailing ServicesIEEE Transactions on Mobile Computing10.1109/TMC.2021.310801222:3(1748-1762)Online publication date: 1-Mar-2023
https://doi.org/10.1109/TMC.2021.3108012
Ngo TDang THuynh VCong Le T(2023)A Systematic Literature Mapping on Using Blockchain Technology in Identity ManagementIEEE Access10.1109/ACCESS.2023.325651911(26004-26032)Online publication date: 2023
https://doi.org/10.1109/ACCESS.2023.3256519
Liu DShen XLiu DShen X(2023)Fair Data Marketing in HCNBlockchain-Based Data Security in Heterogeneous Communications Networks10.1007/978-3-031-52477-6_5(137-183)Online publication date: 19-Dec-2023
https://doi.org/10.1007/978-3-031-52477-6_5
Liu DHuang CNi JLin XShen X(2022)Blockchain-Cloud Transparent Data Marketing: Consortium Management and FairnessIEEE Transactions on Computers10.1109/TC.2022.3150724(1-1)Online publication date: 2022
https://doi.org/10.1109/TC.2022.3150724
Shen XLiu DHuang CXue LYin HZhuang WSun RYing B(2022)Blockchain for Transparent Data Management Toward 6GEngineering10.1016/j.eng.2021.10.0028(74-85)Online publication date: Jan-2022
https://doi.org/10.1016/j.eng.2021.10.002
Huang JHuang TWei HZhang JYan HWong DHu H(2022)zkChain: A privacy‐preserving model based on zk‐SNARKs and hash chain for efficient transfer of assetsTransactions on Emerging Telecommunications Technologies10.1002/ett.470935:4Online publication date: 18-Dec-2022
https://doi.org/10.1002/ett.4709
Meurisch CBayrak BMühlhäuser M(2020)Privacy-preserving AI Services Through Data DecentralizationProceedings of The Web Conference 202010.1145/3366423.3380106(190-200)Online publication date: 20-Apr-2020
https://dl.acm.org/doi/10.1145/3366423.3380106
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

HTML Format

View this article in HTML Format.

Figures

Tables

Media

View Table of Conten