Article: Blockchain-based federated identity and auditing Journal: International Journal of Blockchains and Cryptocurrencies (IJBC) 2020 Vol.1 No.2 pp.179 - 205 Abstract: A federated identity is a single identity that enables users to access multiple services across a network of business parties. Such identities are subject to various threats and attacks and face diverse challenges including identity leaks, centralised management, auditing limitations, and long breach investigation processes. This paper proposes a framework aimed at automating and decentralising the generation and auditing of a robust and secured blockchain-based federated identity in a marketplace. Business parties participating in the marketplace form the nodes of a distributed blockchain network and participate in the creation of federated identities. Users of this network can access services provided by any one of the participating parties using a single federated identity. All transactions are fully audited in the blockchain, meaning that participating parties can monitor access to their service and users can trace the use of their identities. The proposed framework has been evaluated using two blockchain technologies (Ethereum and Hyperledger Fabric) to measure its performance in public and permissioned blockchain environments. Inderscience Publishers - linking academia, business and industry through research

Title: Blockchain-based federated identity and auditing

Authors: Mahmoud M. ElGayyar; Hany F. ElYamany; Katarina Grolinger; Miriam A.M. Capretz; Syed Mir

Addresses: Department of Electrical and Computer Engineering, Western University, London, ON, Canada; Department of Computer Science, Suez Canal University, Ismailia, Egypt ' Department of Electrical and Computer Engineering, Western University, London, ON, Canada; Department of Computer Science, Suez Canal University, Ismailia, Egypt ' Department of Electrical and Computer Engineering, Western University, London, ON, Canada ' Department of Electrical and Computer Engineering, Western University, London, ON, Canada ' London Hydro, London, ON, Canada

Abstract: A federated identity is a single identity that enables users to access multiple services across a network of business parties. Such identities are subject to various threats and attacks and face diverse challenges including identity leaks, centralised management, auditing limitations, and long breach investigation processes. This paper proposes a framework aimed at automating and decentralising the generation and auditing of a robust and secured blockchain-based federated identity in a marketplace. Business parties participating in the marketplace form the nodes of a distributed blockchain network and participate in the creation of federated identities. Users of this network can access services provided by any one of the participating parties using a single federated identity. All transactions are fully audited in the blockchain, meaning that participating parties can monitor access to their service and users can trace the use of their identities. The proposed framework has been evaluated using two blockchain technologies (Ethereum and Hyperledger Fabric) to measure its performance in public and permissioned blockchain environments.

Keywords: blockchain; smart contracts; federated identity management; auditing.

DOI: 10.1504/IJBC.2020.109004

International Journal of Blockchains and Cryptocurrencies, 2020 Vol.1 No.2, pp.179 - 205

Received: 26 May 2019
Accepted: 13 Nov 2019
Published online: 14 Aug 2020 *

Title: Blockchain-based federated identity and auditing

Keep up-to-date