EIDM: A Ethereum-Based Cloud User Identity Management Protocol
In cloud system, user identity authentication is a key problem. If design defects persist in a cloud user identity authentication scheme, direct risks of sensitive data loss and severe information breach will be incurred. At present, the main problem of cloud user identity management system is that...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2019-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8792212/ |
| _version_ | 1818440993809104896 |
|---|---|
| author | Shangping Wang Ru Pei Yaling Zhang |
| author_facet | Shangping Wang Ru Pei Yaling Zhang |
| author_sort | Shangping Wang |
| collection | DOAJ |
| description | In cloud system, user identity authentication is a key problem. If design defects persist in a cloud user identity authentication scheme, direct risks of sensitive data loss and severe information breach will be incurred. At present, the main problem of cloud user identity management system is that it relies too much on third-party services. Although some third-party-detachment schemes have been proposed in recent years, most of them still rely heavily on cloud server-centered design system. In this paper, a cloud user identity management protocol based on ethereum blockchain was proposed, followed by an establishment of a simple credit management system framework. The new protocol is an improved version of CIDM (Consolidated Identity Management) referred to as EIDM (Ethrerum-based Identity Management) protocol. In the improved protocol, JWT (JSON Web Token) in OAuth 2.0 was used to introduce smart contracts into EIDM protocol, and the credit management system was added to the system so that it can provide a credible identity authentication protocol for cloud users and service providers. The new protocol solves the problem of over-reliance on third parties in the existing identity management system solutions. In the end, an analysis on the security of the new protocol showed that the EIDM protocol proposed in this paper presents more diversified security guarantees relative to the CIDM protocol. The performance evaluation results also indicated that the new protocol demonstrates better practicability and flexibility. |
| first_indexed | 2024-12-14T18:21:11Z |
| format | Article |
| id | doaj.art-d4e5a8e0342f4cffa9d638b1247f4a85 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-14T18:21:11Z |
| publishDate | 2019-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-d4e5a8e0342f4cffa9d638b1247f4a852022-12-21T22:52:04ZengIEEEIEEE Access2169-35362019-01-01711528111529110.1109/ACCESS.2019.29339898792212EIDM: A Ethereum-Based Cloud User Identity Management ProtocolShangping Wang0Ru Pei1https://orcid.org/0000-0003-2048-8261Yaling Zhang2https://orcid.org/0000-0002-1759-6678School of Science, Xi’an University of Technology, Xi’an, ChinaSchool of Science, Xi’an University of Technology, Xi’an, ChinaSchool of Computer Science and Engineering, Xi’an University of Technology, Xi’an, ChinaIn cloud system, user identity authentication is a key problem. If design defects persist in a cloud user identity authentication scheme, direct risks of sensitive data loss and severe information breach will be incurred. At present, the main problem of cloud user identity management system is that it relies too much on third-party services. Although some third-party-detachment schemes have been proposed in recent years, most of them still rely heavily on cloud server-centered design system. In this paper, a cloud user identity management protocol based on ethereum blockchain was proposed, followed by an establishment of a simple credit management system framework. The new protocol is an improved version of CIDM (Consolidated Identity Management) referred to as EIDM (Ethrerum-based Identity Management) protocol. In the improved protocol, JWT (JSON Web Token) in OAuth 2.0 was used to introduce smart contracts into EIDM protocol, and the credit management system was added to the system so that it can provide a credible identity authentication protocol for cloud users and service providers. The new protocol solves the problem of over-reliance on third parties in the existing identity management system solutions. In the end, an analysis on the security of the new protocol showed that the EIDM protocol proposed in this paper presents more diversified security guarantees relative to the CIDM protocol. The performance evaluation results also indicated that the new protocol demonstrates better practicability and flexibility.https://ieeexplore.ieee.org/document/8792212/Cloud computingidentity managementblockchainreputationsmart contract |
| spellingShingle | Shangping Wang Ru Pei Yaling Zhang EIDM: A Ethereum-Based Cloud User Identity Management Protocol IEEE Access Cloud computing identity management blockchain reputation smart contract |
| title | EIDM: A Ethereum-Based Cloud User Identity Management Protocol |
| title_full | EIDM: A Ethereum-Based Cloud User Identity Management Protocol |
| title_fullStr | EIDM: A Ethereum-Based Cloud User Identity Management Protocol |
| title_full_unstemmed | EIDM: A Ethereum-Based Cloud User Identity Management Protocol |
| title_short | EIDM: A Ethereum-Based Cloud User Identity Management Protocol |
| title_sort | eidm a ethereum based cloud user identity management protocol |
| topic | Cloud computing identity management blockchain reputation smart contract |
| url | https://ieeexplore.ieee.org/document/8792212/ |
| work_keys_str_mv | AT shangpingwang eidmaethereumbasedclouduseridentitymanagementprotocol AT rupei eidmaethereumbasedclouduseridentitymanagementprotocol AT yalingzhang eidmaethereumbasedclouduseridentitymanagementprotocol |