Blockchain Technology the Identity Management and Authentication Service Disruptor: A Survey

Abstract

The Internet today lacks an identity protocol for identifying people and organizations. As a result, service providers needed to build and maintain their own databases of user information. This solution is costly to the service providers, inefficient as much of the information is duplicated across different providers, difficult to secure as evidenced by recent large-scale personal data breaches around the world, and cumbersome to the users who need to remember different sets of credentials for different services. Furthermore, personal information could be collected for data mining, profiling and exploitation without users' knowledge or consent. The ideal solution would be self-sovereign identity, a new form of identity management that is owned and controlled entirely by each individual user. This solution would include the individual's consolidated digital identity as well as their set of verified attributes that have been cryptographically signed by various trusted issuers. The individual provides proof of identity and membership by sharing relevant parts of their identity with the service providers. Consent for access may also be revoked hence giving the individual full control over its own data. This survey critically investigates different blockchain based identity management and authentication frameworks. A summary of the state-of-the-art blockchain based identity management and authentication solutions from year 2014 to 2018 is presented. The paper concludes with the open issues, main challenges and directions highlighted for future work in this area. In a nutshell, the discovery of this new mechanism disrupted the existing identity management and authentication solutions and by providing a more promising secure platform.

Distributed Ledger Technology for eHealth Identity Privacy: State of The Art and Future Perspective

“…Moreover, Yun Lim et al [25] gave a summary of blockchain-based identity management and authentication solutions for the last five years together with identifying centralized identity management open issues and challenges. Similarly, Zhu et al [26] investigated recent surging blockchain-based identity management for the internet of things (IoT) and enumerate several identity projects and startups in the era of IoT.…”

Know Your Customer (KYC) Implementation with Smart Contracts on a Privacy-Oriented Decentralized Architecture

“…In the recent report Scientific and Technical Research Report of European Commission on Blockchain [17], the need for Know Your Customer mechanisms is highlighted: "the obligation of cryptocurrency exchanges and custodian wallet providers within the scope of EU regulation to implement mechanisms to counter money laundering and terrorist fundraising, such as 'know your customer' (KYC)". Blockchain-based identity management and authentication frameworks have been proposed [18,19] recognizing the potential of decentralizing the ownership of credentials and offering a universally available protocol for verifying one's record in an immutable chain of data. Mikula et al [20] proposed an authorization and authentication proof-of-concept system for identity management based on a use case concerning Electronic Health Records, where an immutable and auditable history is desired for data concerning patients.…”

ElectroBlocks: A blockchain‐based energy trading scheme for smart grid systems

“…Peikherfeh et al 20 proposed an optimal power flow (OPF)-based monitoring mechanism for clean energy tracking. For secure energy trading, other researchers [21][22][23][24] have proposed blockchain-based approaches for deployment in SG systems. For example, a blockchain-based approach for smart cities was proposed by Pieroni et al, 25 wherein the tracking process for generation and management of energy was explored.…”