SSH-DAuth:基于秘密共享的去中心化OAuth使用去中心化标识符
Danda Prudhvi Krishna1, R Ramaguru1, K Praveen1
1TIFAC-CORE in Cyber Security, Amrita School of Engineering, Amrita Vishwa Vidyapeetham, Coimbatore, India.
Scientific reports
|October 26, 2023
概括
本研究介绍了一种新的分布式认证和授权框架,使用秘密共享,区块链和去中心化标识符来增强安全性并防止单次登录 (SSO) 系统中的第三方欺诈.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 分布式系统 分布式系统
背景情况:
- OAuth 2.0 允许单一登录 (SSO),但将用户数据集中,造成第三方欺诈和身份盗窃的风险.
- 现有的身份验证方法缺乏强大的去中心化,在用户数据管理中产生漏洞.
研究的目的:
- 提出一个分布式认证和授权框架,消除第三方参与.
- 通过去中心化在SSO系统中增强用户安全和隐私.
主要方法:
- 一个新的框架,将秘密共享机制与基于区块链的去中心化标识符 (DID) 集成在一起.
- 使用星际文件系统 (IPFS) 进行私人分布式存储.
- 实施了Hyperledger Fabric (许可) 和以太坊测试网 (无许可区块链) 的框架.
主要成果:
- 基于秘密共享的认证证明了可以忽略的生成时间和使用组合共享的高效验证.
- 该框架提供了强大的端到端安全性.
- 达到符合通用兼容性框架的要求.
结论:
- 拟议的分布式框架有效地解决了与集中式SSO系统相关的安全问题.
- 秘密共享,区块链DID和IPFS的集成为用户身份验证和授权提供了安全有效的替代方案.
相关概念视频
Social Exchange Theory
34.5K
We have discussed why we form relationships, what attracts us to others, and different types of love. But what determines whether we are satisfied with and stay in a relationship? One theory that provides an explanation is social exchange theory. According to social exchange theory, we act as naïve economists in keeping a tally of the ratio of costs and benefits of forming and maintaining a relationship with others (Rusbult & Van Lange, 2003).
34.5K
Social Proof
27.7K
Social proof is a form of persuasion based on comparison and conformity. People compare their behavior and actions to what others are doing and will change to conform to do what their peers do.
27.7K
Deindividuation
26.4K
Deindividuation is a form of social influence on an individual’s behavior such that the individual engages in unusual or non-normal behavior while in a group setting. Why? Because in these group settings, the individual no longer sees themselves as an individual anymore, disinhibiting their behavior and personal restraint.
26.4K
Social Loafing
34.8K
Another way in which a group presence can affect performance is social loafing—the exertion of less effort by a person working together with a group. Social loafing occurs when our individual performance cannot be evaluated separately from the group. Thus, group performance declines on easy tasks (Karau & Williams, 1993). Essentially individual group members loaf and let other group members pick up the slack. Because each individual’s efforts cannot be evaluated,...
34.8K
In- and Out-Groups
39.1K
People all belong to a gender, race, age, and social economic group. These groups provide a powerful source of our identity and self-esteem (Tajfel & Turner, 1979) and serve as our in-groups. An in-group is a group that we identify with or see ourselves as belonging to.
39.1K
Second Uniqueness Theorem
1.0K
Consider a region consisting of several individual conductors with a definite charge density in the region between these conductors. The second uniqueness theorem states that if the total charge on each conductor and the charge density in the in-between region are known, then the electric field can be uniquely determined.
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the...
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the...
1.0K


