Identity and access management using distributed ledger technology: A survey

Abstract

Summary As the basic building block of any information security system, identity and access management (IAM) solutions play vital role in enterprise's security programmes. Providing centric solutions for IAM is inefficient in terms of having single point of failure, high cost, duplication and complexity to the users. Recently, emerging the distributed ledger technology (DLT) has attracted significant scientific interests in research areas like identity management, authentication and access control processes. In these contexts, Blockchain can offer greater data and rule confidentiality and integrity, as well as increasing the availability of the system by removing the single point of failure in the procedure. In this paper, we provide a comprehensive overview of the IAM solutions based on their basic components including identity management, authentication and access control. In the identity concept, we discuss about self‐sovereign identity which enhances privacy and security of distributed digital identities by providing individual's consolidated digital identity and verified attributes for enabling them to utilize their ownership. To offer a clearer understanding of the state of the art, we propose taxonomy to categorize them based on their features. For the conclusion of the paper, we compare the existing methods based on proposed taxonomy. Also, considering the advantages and disadvantages of existing methods, we discussed about the possible future directions.

Blockchain-Based Identity Management System and Self-Sovereign Identity Ecosystem: A Comprehensive Survey

“…Though is built on top of a public blockchain, its architecture is engineered to be very scalable. However, Shocard does not provide minimization of data [33], [87], though Bokkem et al [88] differ on that point.…”

Self-Sovereign Identity: A Systematic Review, Mapping and Taxonomy

“…Despite this, the majority of existing reviews claim that SSI cannot be implemented without blockchain [ 9 , 13 , 14 , 15 , 16 , 17 , 18 , 19 ]. In terms of research method, one of the existing surveys conducted a systematic mapping of the literature [ 10 ], two devised taxonomies [ 11 , 20 ], one carried a meta-synthesis [ 12 ], and seven did not detail any method for selecting and analyzing primary sources [ 13 , 14 , 15 , 16 , 17 , 18 , 19 ]. Next, we present existing secondary research in SSI.…”

“…Taxonomies for SSI are introduced by both [ 11 , 20 ]. The former proposes a four-tiered taxonomy encompassing registration, authentication, data management, and verifiable claims.…”

“…Unlike previous surveys [ 9 , 10 , 11 , 12 , 13 , 14 , 15 , 16 , 17 , 18 , 19 , 20 ], we examine conceptual discussions of SSI and include publications that are not blockchain-based .…”

Gerenciamento Descentralizado de Identidades para Cidades Inteligentes Baseado na Tecnologia Blockchain

“…Na literatura, diversos autores exploram a tecnologia blockchain para aplicá-la no gerenciamento de identidade [Ghaffari et al 2022].…”