Providing Login and Wi-Fi Access Services With the eIDAS Network: A Practical Approach

Abstract

The digital identity (or electronic identity) of a person is about being able to prove upon authentication who one is on the Internet, with a certain level of assurance, such as by means of some attributes obtained from a trustworthy Identity Provider. In Europe, the eIDAS Network allows the citizens to authenticate securely with their national credentials and to provide such personal attributes when getting access to Service Providers in a different European country. Although the eIDAS Network is more and more known, its integration with real operational services is still at an initial phase. This paper presents two eIDAS-enabled services, Login with eIDAS and Wi-Fi access with eIDAS, that we have designed, implemented, deployed, and validated at the Politecnico di Torino in Italy. The validation study involved several undergraduate students, who have run the above services with their authentication credentials and platforms and with minimal indications on their usage. The results indicate that the services were beneficial. Several advantages exist both for the users and for the Service Providers, such as resistance to some security attacks and the possibility to adopt the service without prior user registration (e.g. for short meetings, or in public places). However, some students expressed doubts about exploiting their national eID for Wi-Fi access, mainly in connection with usability and privacy issues. We discuss also these concerns, along with advantages and disadvantages of the proposed services. INDEX TERMS cross-border authentication, eIDAS Regulation, electronic identification, Login service, Wi-Fi access service.

On Enabling Additional Natural Person and Domain-Specific Attributes in the eIDAS Network

“…To validate the implementations, we involved students at our university who have used their SPID authentication credentials to access Erasmus enrollment services at three foreign universities. Herein, we extend our previous work on the integration of the APs into the eIDAS network documented in [18] [19] [20].…”

“…This work is useful in the scope of this paper because it indicates that several attributes are needed to obtain a unique person identification. Berbecaru et al discussed in [19] the homonyms (persons with the same name, surname, date of birth) in the person identification process. The same authors explained that the eIDAS MDS attributes carrying the name, surname, date of birth are not sufficient to distinguish a person from another person (with the same name, surname, date of birth).…”

“…The same authors explained that the eIDAS MDS attributes carrying the name, surname, date of birth are not sufficient to distinguish a person from another person (with the same name, surname, date of birth). For this reason, in [19], the authors adopted a countermeasure, i.e., the user was asked to bind in the service his current eIDAS PersonIdentifier to his national unique identifier. Moreover, the EC report [13] notes that "the rigid data set for notified eID makes it also difficult to match identity records as the current minimum data set (eIDAS MDS) is often not sufficient to uniquely identify a person".…”

“…Another example of a long-term service is the "Login with eIDAS" service for academic personnel (students, teachers) described in [19]. In this case, the university (acting as SP) has already registered the persons and indexed them in the internal database based on their national identifier.…”

Connect attack in IoT-WSN detect through cyclic analysis based on forward and backward elimination

“…Predicting the class of attacks on Wi-Fi networks is accomplished using a Support Vector Machine (SVM) ( Villain et al, 2019 ). Services enabled by eIDAS, such as login and Wi-Fi access, are prone to attacks and necessitate robust security algorithms ( Berbecaru, Lioy & Cameroni, 2020 ). In WSN, intrusion detection is imperative due to high data transfer.…”