[논문]A Security Analysis of Blockchain-Based Did Services

Kim, Bong Gon; Cho, Young-Seob; Kim, Seok-Hyun; Kim, Hyoungshick; Woo, Simon S.

doi:10.1109/access.2021.3054887

A Security Analysis of Blockchain-Based Did Services 원문보기

IEEE access : practical research, open solutions, v.9, 2021년, pp.22894 - 22913

Kim, Bong Gon (Stony Brook University, Stony Brook, NY, USA) , Cho, Young-Seob (Electronics and Telecommunications Research Institute, Daejeon, South Korea) , Kim, Seok-Hyun (Electronics and Telecommunications Research Institute, Daejeon, South Korea) , Kim, Hyoungshick (Sungkyunkwan University, Suwon, South Korea) , Woo, Simon S. (Sungkyunkwan University, Suwon, South Korea)

Abstract ▼ AI-Helper

Decentralized identifiers (DID) has shown great potential for sharing user identities across different domains and services without compromising user privacy. DID is designed to enable the minimum disclosure of the proof from a user’s credentials on a need-to-know basis with a contextualized delegation. At first glance, DID appears to be well-suited for this purpose. However, the overall security of DID has not been thoroughly examined. In this paper, we systemically explore key components of DID systems and analyze their possible vulnerabilities when deployed. First, we analyze the data flow between DID system components and analyze possible security threats. Next, we carefully identify potential security threats over seven different DID functional domains, ranging from user wallet to universal resolver. Lastly, we discuss the possible countermeasures against the security threats we identified.

참고문헌 (83)

10.1109/CIC.2018.00033
10.1109/HICSS.2016.345
Tompa, Martin, Woll, Heather. How to share a secret with cheaters. Journal of cryptology : the journal of the International Association for Cryptologic Research, vol.1, no.3, 133-138.

상세보기
10.1109/ICDCS.2019.00119
RFC6840 Clarifications and Implementation Notes for DNS Security (DNSSEC) weiler 2013
10.1109/NCA.2019.8935025
Decentralized Identifier Resolution (Did Resolution) V0 2 2020
Crypto Obfuscator For Net (V2020) 2020
10.1007/978-3-540-89556-5_4
Huaqun Wang, Futai Zhang, Yanfei Sun. Cryptanalysis of a Generalized Ring Signature Scheme. IEEE transactions on dependable and secure computing, vol.6, no.2, 149-151.

상세보기
arXiv 1808 06254 SABRE: Protecting bitcoin against routing attacks apostolaki 2018
Proc IEEE InfoCom Enhancing cache robustness for content-centric networking xie 2012 2426
Wallet Query Language 2020
Walkthrough India 2020
Did Documents 2020
SOFSEM Formal analysis of Facebook connect single sign-on authentication protocol miculan 2011 11 22
Verifiable Data Registry 2020
Hyperledger Ursa Explainer 2020
Hyperledger Aries Explainer 2020
Meet Connect Me the First Sovrin-Based Digital Wallet 2020
Microservice Architecture Aligning Principles Practices and Culture nadareishvili 2016
Server-Side Request Forgery (SSRF) 2020
10.1109/BDCloud.2018.00137
Proc IEEE Eur Symp Secur Privacy (EuroS P) Redactable blockchain–or–rewriting history in bitcoin and friends ateniese 2017 111
RADIUS Securing Public Access to Private Resources hassell 2002
Brassard, G., Chaum, D., Crepeau, C.. Minimum disclosure proofs of knowledge. Journal of computer and system sciences, vol.37, no.2, 156-189.

상세보기
Proc Project Athena Tech Plan Kerberos authentication and authorization system miller 1988
Chameleon hashing and signatures krawczyk 1998
10.14722/ndss.2019.23066
SAML: The secret to centralized identity management simon 2004
arXiv 1904 03487 Exploring the attack surface of blockchain: A systematic overview saad 2019
10.1109/BLOC.2019.8751229
The Path to Self-Sovereign Identity allen 2020
10.1109/SP.2017.29
Kim, Eunsoo, Cho, Young-Seob, Kim, Bedeuro, Ji, Woojoong, Kim, Seok-Hyun, Woo, Simon S., Kim, Hyoungshick. Can We Create a Cross-Domain Federated Identity for the Industrial Internet of Things without Google?. IEEE internet of things magazine, vol.3, no.4, 82-87.

상세보기
Proc Int Conf Res Secur Standardisation Vision: A critique of immunity passports and W3C decentralized identifiers halpin 2020 10.1007/978-3-030-64357-7_7 148
Art 4 GDPR Definitions 2020
Eisenstadt, Marc, Ramachandran, Manoharan, Chowdhury, Niaz, Third, Allan, Domingue, John. COVID-19 Antibody Test/Vaccination Certification: There's an App for That. IEEE open journal of engineering in medicine and biology, vol.1, 148-155.

상세보기
Peer DID Method 1 0 Specification 2020
Enhancing the privacy of decentralized identifiers with ring signatures biswas 2020
Part of the Original Why i wrote PGP zimmermann 1991 1
10.1007/3-540-45831-X_4
Mediators and Relays 2020
Cross-Domain Messaging 2020
Tourani, Reza, Misra, Satyajayant, Mick, Travis, Panwar, Gaurav. Security, Privacy, and Access Control in Information-Centric Networking: A Survey. IEEE Communications surveys and tutorials, vol.20, no.1, 566-600.

상세보기
Cory Wright's blog Understanding kaminsky’s dns bug wright 2008
Decentralized Identifier Resolution (Did Resolution) V0 2 2020
10.1145/3243734.3243785
Proc APWG Symp Electron Crime Res (eCrime) Inside a phisher’s mind: Understanding the anti-phishing ecosystem through phishing kit analysis oest 2018 1
Do, Q., Martini, B., Choo, K.K.R.. Exfiltrating data from Android devices. Computers & security, vol.48, 74-91.

상세보기
Smali/Baksmali Explainer gruver 2020
Conti, Mauro, Dragoni, Nicola, Lesyk, Viktor. A Survey of Man In The Middle Attacks. IEEE Communications surveys and tutorials, vol.18, no.3, 2027-2051.

상세보기
Decentralized identifiers (DIDs) v1 0 Core architecture data model and representations reed 2020
Proc Surveill Cultures A Global Surveill Soc A critical review of 10 years of privacy technology danezis 2010 1
Verifiable credentials data model 1 0 Expressing verifiable information on the web 2020
Aries RFC 0004 Agents 2020
DKMS (Decentralized Key Management System) Design and Architecture V4 reed 2020
Aries RFC 0005 Did Communication hardman 2020
Universal Resolver 2020
Implementing Threshold Schemes sprenkels 2020
10.1109/COMPSAC.2018.10299
Karami, A., Guerrero-Zapata, M.. An ANFIS-based cache replacement method for mitigating cache pollution attacks in Named Data Networking. Computer networks, vol.80, 51-65.

상세보기
Proc Int Conf Wireless Netw (ICWN) Implementation and performance analysis of PBKDF2, Bcrypt, Scrypt algorithms ertaul 2016 66
10.6028/NIST.FIPS.202
Shamir’s Secret-Sharing for Mnemonic Codes 2020
Proc Annu Cryptol Conf Cryptographic extraction and key derivation: The HKDF scheme krawczyk 2010 631
10.1109/INFCOM.1999.749260
A Protocol and Token for SelfSovereign Identity and Decentralized Trust 2020
Microsoft Corp The laws of identity cameron 2005 5 8
A Decentralized Open Source Solution for Digital Identity and Access Management 2020
Uport Specs 2020
Decentralized identity and access management framework for Internet of Things devices omar 2020
Blind Trust Before Verification gultsch 2020
10.1109/ISCC50000.2020.9219594
10.1145/2885990.2885999
10.1109/Blockchain.2019.00004
Shamir, Adi. How to share a secret. Communications of the ACM, vol.22, no.11, 612-613.

상세보기
Trust on First Use 2020
Did Exchange Protocol 1 0 2020
Input Metadata Properties 2020
Proc IEEE Secur Privacy The provable security of ed25519: Theory and practice brendel 2020 1
Did Url Dereferencing 2020
Did Url Syntax 2020

LOADING...

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증

A Security Analysis of Blockchain-Based Did Services 원문보기

Abstract ▼ AI-Helper

참고문헌 (83)

이 논문을 인용한 문헌

연구과제 타임라인

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

연합인증

A Security Analysis of Blockchain-Based Did Services 원문보기

Abstract ▼ AI-Helper

참고문헌 (83)

이 논문을 인용한 문헌

연구과제 타임라인

전체(0) 논문(0) 특허(0) 보고서(0)

전체(0) 논문(0) 특허(0) 보고서(0)

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트