政大機構典藏-National Chengchi University Institutional Repository(NCCUR):Item 140.119/144605

政大機構典藏-National Chengchi University Institutional Repository(NCCUR):Item 140.119/144605

English | 正體中文 | 简体中文 | Post-Print筆數 : 27 | Items with full text/Total items : 112704/143671 (78%)
Visitors : 49763582 Online Users : 510

RC Version 6.0 © Powered By DSPACE, MIT. Enhanced by NTU Library IR team.

Scope

please add "double quotation mark" for query phrases to get precise results

please goto advance search for comprehansive author search

Adv. Search

Home ‧ Login ‧ Upload ‧ Help ‧ About ‧ Administer

Goto mobile version

政大典藏 > College of Informatics > Department of Computer Science > Theses > Item 140.119/144605

Please use this identifier to cite or link to this item: https://nccur.lib.nccu.edu.tw/handle/140.119/144605

Title:	區塊鏈網路中基於屬性之自主身份發行系統 Blockchain-based Self-sovereign Identity System with Attribute-based Issuance
Authors:	李亦修 Lee, Yi-Hsiu
Contributors:	左瑞麟 Tso, Raylin 李亦修 Lee, Yi-Hsiu
Keywords:	區塊鏈去中心化身份自主身份批次撤銷 Blockchain Decentralized identity Self-sovereign Batch revocation
Date:	2022
Issue Date:	2023-05-02 15:06:52 (UTC+8)
Abstract:	隨著近年來區塊鏈應用如雨後春筍般的大量發展，有許多人開始嘗試在去中心化的網路上，如區塊鏈網路，部署數位身份的管理系統，然而，因為在區塊鏈中的資料具有公開透明的特性，對於數位身份系統這類需要隱私保護的應用來說，存在著一些難題需要克服。為了解決此問題，我們採用模糊傳輸(oblivious transfer)與可信執行環境(trusted execution environment)來達成對使用者隱私的保護。此外，我們提出一個系統，此系統能夠將使用者的身份屬性從現存的伺服器，轉移至區塊鏈網路上，並且在智能合約中驗證屬性來源是否為可信任，根據驗證結果決定是否將使用者的屬性發行於區塊鏈網路上，同時保護屬性的隱私。在此系統的屬性驗證協定中，我們將可信執行環境使用在機密智能合約(confidential smart contract)中，藉此確保智能合約在執行驗證的邏輯運算時的隱私。同時，在此系統中，使用者可以自由地控制他們自己的屬性，也能將已驗證的屬性組成身份，來向服務提供商提交使用。此外，我們也採用智能合約來記錄屬性的當前狀態，透過改變記錄在智能合約上的屬性當前狀態，來達到批次撤銷身份的目的。我們也在此篇論文中提供本系統的安全性分析，以及與其他基於區塊鏈的身份系統的比較分析，藉此說明我們的系統在隱私保護、以使用者為中心的系統與撤銷機制上所具備的優勢。 With the rapid development of blockchain applications, digital identity management systems have started being deployed on decentralized networks. However, the inherent transparency of blockchain technology poses a challenge to privacy-conscious applications. To address this challenge, we adopt a DDH-based oblivious transfer and trust execution environment (TEE) to hide users’ private attributes. Furthermore, we propose a concrete system that includes transferring users’ attributes from a legacy server for verifying and issuing on the blockchain. In verifying protocol, we apply TEE in confidential smart contracts that execute the verification logic privately. Users can control their data and freely compose their identities using verified attributes. We also leverage smart contracts to record the status of attributes to achieve batch revocation of identities. Security analysis and comparison demonstrate that our system achieves privacy protection and is more user-centric in revocation than existing blockchain-based identity systems.
Reference:	[AHS11]Gergely Alpár, Jaap-Henk Hoepman, and Johanneke Siljee. “The Identity Crisis. Security, Privacy and Usability Issues in Identity Management.” In: CoRR abs/1101.0427 (2011). arXiv: 1101.0427 (cit. p. 2). [ABB+ 18]Elli Androulaki, Artem Barger, Vita Bortnikov, et al. “Hyperledger fabric: a distributed operating system for permissioned blockchains.” In: Proceedings of the Thirteenth EuroSys Conference, EuroSys 2018, Porto, Portugal, April 23-26, 2018. Ed. by Rui Oliveira, Pascal Felber, and Y. Charlie Hu. ACM, 2018, 30:1–30:15 (cit. p. 10). [Bag19]Karim Baghery. “On the Efficiency of Privacy-Preserving Smart Contract Systems.” In: Progress in Cryptology - AFRICACRYPT 2019 - 11th International Conference on Cryptology in Africa, Rabat, Morocco, July 9-11, 2019, Proceedings. Ed. by Johannes Buchmann, Abderrahmane Nitaj, and Tajje-eddine Rachidi. Vol. 11627. Lecture Notes in Computer Science. Springer, 2019, pp. 118–136 (cit. p. 10). [BCK+ 18]Marcus Brandenburger, Christian Cachin, Rüdiger Kapitza, and Alessandro Sorniotti. “Blockchain and Trusted Computing: Problems, Pitfalls, and a Solution for Hyperledger Fabric.” In: CoRR abs/1805.08541 (2018). arXiv: 1805.08541 (cit. p. 10). [BAZ+ 20]Benedikt Bünz, Shashank Agrawal, Mahdi Zamani, and Dan Boneh. “Zether: Towards Privacy in a Smart Contract World.” In: Financial Cryptography and Data Security - 24th International Conference, FC 2020, Kota Kinabalu, Malaysia, February 10-14, 2020 Revised Selected Papers. Ed. by Joseph Bonneau and Nadia Heninger. Vol. 12059. Lecture Notes in Computer Science. Springer, 2020, pp. 423–443 (cit. p. 10). [BBB+ 18]Benedikt Bünz, Jonathan Bootle, Dan Boneh, et al. “Bulletproofs: Short Proofs for Confidential Transactions and More.” In: 2018 IEEE Symposium on Security and Privacy, SP 2018, Proceedings, 21-23 May 2018, San Francisco, California, USA. IEEE Computer Society, 2018, pp. 315–334 (cit. p. 10). [DA01]Wenliang Du and Mikhail J. Atallah. “Secure multi-party computation problems and their applications: a review and open problems.” In: Proceedings of the New Security Paradigms Workshop 2001, Cloudcroft, New Mexico, USA, September 10-13, 2001. Ed. by Victor Raskin, Steven J. Greenwald, Brenda Timmerman, and Darrell M. Kienzle. ACM, 2001, pp. 13–22 (cit. p. 3). [DP18]Paul Dunphy and Fabien A. P. Petitcolas. “A First Look at Identity Management Schemes on the Blockchain.” In: IEEE Secur. Priv. 16.4 (2018), pp. 20–29 (cit. p. 2). [ER17]Dmitry Efanov and Pavel Roschin. “The All-Pervasiveness of the Blockchain Technology.” In: 8th Annual International Conference on Biologically Inspired Cognitive Architectures, BICA 2017, August 1-6, 2017, Moscow, Russia. Ed. by Alexei V. Samsonovich and Valentin V. Klimov. Vol. 123. Procedia Computer Science. Elsevier, 2017, pp. 116–121 (cit. p. 2). [FCA19]Md. Sadek Ferdous, Farida Chowdhury, and Madini O. Alassafi. “In Search of Self-Sovereign Identity Leveraging Blockchain Technology.” In: IEEE Access 7 (2019), pp. 103059–103079 (cit. p. 2). [Fou]Decentralized Identity Foundation. Decentralized Identity Foundation. https : / / identity . foundation/. Accessed: 2022-06-20 (cit. p. 2). [Gol98]Oded Goldreich. “Secure multi-party computation.” In: Manuscript. Preliminary version 78.110 (1998) (cit. p. 3). [Jac16]Ori Jacobovitz. “Blockchain for identity management.” In: The Lynne and William Frankel Center for Computer Science Department of Computer Science. Ben-Gurion University, Beer Sheva 1 (2016), p. 9 (cit. p. 2). [KMS+ 16]Ahmed E. Kosba, Andrew Miller, Elaine Shi, Zikai Wen, and Charalampos Papamanthou. “Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts.” In: IEEE Symposium on Security and Privacy, SP 2016, San Jose, CA, USA, May 22-26, 2016. IEEE Computer Society, 2016, pp. 839–858 (cit. p. 10). [LB15]Maryline Laurent and Samia Bouzefrane. Digital identity management. Elsevier, 2015 (cit. p. 1). [LLT+ 22]Yi-Hsiu Lee, Zi-Yuan Liu, Raylin Tso, and Yi-Fan Tseng. “Blockchain-Based Self-Sovereign Identity System with Attribute-Based Issuance.” In: Information Security Practice and Experience - 17th International Conference, ISPEC 2022, Taipei, Taiwan, November 23-25, 2022, Proceedings. Ed. by Chunhua Su, Dimitris Gritzalis, and Vincenzo Piuri. Vol. 13620. Lecture Notes in Computer Science. Springer, 2022, pp. 21–38 (cit. p. 4). [LWW+ 22]Rujia Li, Qin Wang, Qi Wang, David Galindo, and Mark Ryan. “SoK: TEE-Assisted Confidential Smart Contract.” In: Proc. Priv. Enhancing Technol. 2022.3 (2022), pp. 711–731 (cit. p. 10). [LLC22]RaulWalter LLC. Digital Identity Management. https://www.raulwalter.com/government/ digital-identity-management/. Accessed: 2022-07-20. 2022 (cit. p. 1). [MMZ+ 21]Deepak Maram, Harjasleen Malvai, Fan Zhang, et al. “CanDID: Can-Do Decentralized Identity with Legacy Compatibility, Sybil-Resistance, and Accountability.” In: 42nd IEEE Symposium on Security and Privacy, SP 2021, San Francisco, CA, USA, 24-27 May 2021. IEEE, 2021, pp. 1348–1366 (cit. p. 3). [MPJ18]Bhabendu Kumar Mohanta, Soumyashree S. Panda, and Debasish Jena. “An Overview of Smart Contract and Use Cases in Blockchain Technology.” In: 9th International Conference on Computing, Communication and Networking Technologies, ICCCNT 2018, Bengaluru, India, July 10-12, 2018. IEEE, 2018, pp. 1–4 (cit. p. 9). [NJ20]Nitin Naik and Paul Jenkins. “uPort Open-Source Identity Management System: An Assessment of Self-Sovereign Identity and User-Centric Data Platform Built on Blockchain.” In: IEEE International Symposium on Systems Engineering, ISSE 2020, Vienna, Austria, October 12 - November 12, 2020. IEEE, 2020, pp. 1–7 (cit. p. 2). [Nak08]Satoshi Nakamoto. “Bitcoin: A peer-to-peer electronic cash system.” In: Decentralized Business Review (2008), p. 21260 (cit. pp. 2, 8). [NP99]Moni Naor and Benny Pinkas. “Oblivious Transfer with Adaptive Queries.” In: Advances in Cryptology - CRYPTO ’99, 19th Annual International Cryptology Conference, Santa Barbara, California, USA, August 15-19, 1999, Proceedings. Ed. by Michael J. Wiener. Vol. 1666. Lecture Notes in Computer Science. Springer, 1999, pp. 573–590 (cit. p. 8). [Rab05]Michael O. Rabin. “How To Exchange Secrets with Oblivious Transfer.” In: IACR Cryptol. ePrint Arch. (2005), p. 187 (cit. p. 7). [RSL+ 20]Drummond Reed, Manu Sporny, Dave Longley, et al. “Decentralized identifiers (dids) v1. 0.” In: Draft Community Group Report (2020) (cit. p. 2). [SBJ+ 14]Natsuhiko Sakimura, John Bradley, Mike Jones, Breno De Medeiros, and Chuck Mortimore. “Openid connect core 1.0.” In: The OpenID Foundation (2014), S3 (cit. p. 1). [SA21]Ravital Solomon and Ghada Almashaqbeh. “smartFHE: Privacy-Preserving Smart Contracts from Fully Homomorphic Encryption.” In: IACR Cryptol. ePrint Arch. (2021), p. 133 (cit. p. 10). [Sza21]Pawel Szalachowski. “Password-Authenticated Decentralized Identities.” In: IEEE Trans. Inf. Forensics Secur. 16 (2021), pp. 4801–4810 (cit. p. 10). [VV17]Paul Voigt and Axel Von dem Bussche. “The eu general data protection regulation (gdpr).” In: A Practical Guide, 1st Ed., Cham: Springer International Publishing 10.3152676 (2017), pp. 10–5555 (cit. p. 2). [WYW+ 18]Shuai Wang, Yong Yuan, Xiao Wang, et al. “An Overview of Smart Contract: Architecture, Applications, and Future Trends.” In: 2018 IEEE Intelligent Vehicles Symposium, IV 2018, Changshu, Suzhou, China, June 26-30, 2018. IEEE, 2018, pp. 108–113 (cit. p. 9). [Woo+ 14]Gavin Wood et al. “Ethereum: A secure decentralised generalised transaction ledger.” In: Ethereum project yellow paper 151.2014 (2014), pp. 1–32 (cit. p. 9). [YL20]Xiaohui Yang and Wenjie Li. “A zero-knowledge-proof-based digital identity management scheme in blockchain.” In: Comput. Secur. 99 (2020), p. 102050 (cit. p. 3). [ZCC+ 16]Fan Zhang, Ethan Cecchetti, Kyle Croman, Ari Juels, and Elaine Shi. “Town Crier: An Authenticated Data Feed for Smart Contracts.” In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria, October 24-28, 2016. Ed. by Edgar R. Weippl, Stefan Katzenbeisser, Christopher Kruegel, Andrew C. Myers, and Shai Halevi. ACM, 2016, pp. 270–282 (cit. p. 3). [ZMM+ 20]Fan Zhang, Deepak Maram, Harjasleen Malvai, Steven Goldfeder, and Ari Juels. “DECO: Liberating Web Data Using Decentralized Oracles for TLS.” In: CCS ’20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020. Ed. by Jay Ligatti, Xinming Ou, Jonathan Katz, and Giovanni Vigna. ACM, 2020, pp. 1919–1938 (cit. p. 3). [ZNP15]Guy Zyskind, Oz Nathan, and Alex Pentland. “Enigma: Decentralized Computation Platform with Guaranteed Privacy.” In: CoRR abs/1506.03471 (2015). arXiv: 1506.03471 (cit. p. 10).
Description:	碩士國立政治大學資訊科學系 109753123
Source URI:	http://thesis.lib.nccu.edu.tw/record/#G0109753123
Data Type:	thesis
Appears in Collections:	[Department of Computer Science ] Theses

Files in This Item:

File	Description	Size	Format
312301.pdf		740Kb	Adobe PDF2	97	View/Open

All items in 政大典藏 are protected by copyright, with all rights reserved.

社群 sharing

著作權政策宣告 Copyright Announcement

1.本網站之數位內容為國立政治大學所收錄之機構典藏，無償提供學術研究與公眾教育等公益性使用，惟仍請適度，合理使用本網站之內容，以尊重著作權人之權益。商業上之利用，則請先取得著作權人之授權。
The digital content of this website is part of National Chengchi University Institutional Repository. It provides free access to academic research and public education for non-commercial use. Please utilize it in a proper and reasonable manner and respect the rights of copyright owners. For commercial use, please obtain authorization from the copyright owner in advance.

2.本網站之製作，已盡力防止侵害著作權人之權益，如仍發現本網站之數位內容有侵害著作權人權益情事者，請權利人通知本網站維護人員(nccur@nccu.edu.tw)，維護人員將立即採取移除該數位著作等補救措施。
NCCU Institutional Repository is made to protect the interests of copyright owners. If you believe that any material on the website infringes copyright, please contact our staff(nccur@nccu.edu.tw). We will remove the work from the repository and investigate your claim.

DSpace Software Copyright © 2002-2004 MIT & Hewlett-Packard / Enhanced by NTU Library IR team Copyright © - Feedback