Improved Identity Management with Verifiable Credentials and FIDO - Archive ouverte HAL Access content directly
Journal Articles IEEE Communications Standards Magazine Year : 2019

Improved Identity Management with Verifiable Credentials and FIDO

Abstract

We describe how FIDO and W3C VCs can overcome the problems of existing identity management systems. We describe our conceptual model and architecture, and the protocol we used by extending FIDO's UAF in order to provide both strong authentication and strong authorization. We built a pilot implementation for U.K. NHS patients to validate our implementation. Patients were able to use a mobile phone with a fingerprint reader to access restricted NHS sites in order to make and cancel appointments and order repeat prescription drugs. Our initial user trials with 10 U.K. NHS patients found the system to be easy to use, and fingerprints to be preferable to using usernames and passwords for authentication.
Fichier principal
Vignette du fichier
chadwick_26405.pdf (1.21 Mo) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-02950805 , version 1 (28-09-2020)

Identifiers

Cite

David W. Chadwick, Romain Laborde, Arnaud Oglaza, Rémi Venant, Ahmad Samer Wazan, et al.. Improved Identity Management with Verifiable Credentials and FIDO. IEEE Communications Standards Magazine, 2019, 3 (4), pp.14-20. ⟨10.1109/MCOMSTD.001.1900020⟩. ⟨hal-02950805⟩
211 View
255 Download

Altmetric

Share

Gmail Facebook X LinkedIn More