Privacy Enhanced Decentralized Identity System

Currently, a number of public and private organizations have implemented various identity management solutions to manage authentication; authorization privileges of their users within or across system and enterprise boundaries. The idea of using a third party identity provider (IdP) to access a relying party (RP) is not new, and both RP and IdP have much to gain from such solution. A federated identity ecosystem in which RPs and IdPs have to connect only once has further benefits. While deployed identity brokerage systems provide great utility to their participants, it has been noted that the principles upon which they are designed have several security and privacy gaps. Potential shortcomings of federated identity access systems stem from a central observation point, where a ‘honest but curious’ or ‘compromised’ broker may gain unauthorized access to the data. TO BE CONT’D

Faculty Supervisor:

Marsha Chechik

Student:

Partner:

SecureKey Technologies Inc

Discipline:

Computer science

Sector:

Information and cultural industries; Professional, scientific and technical services

University:

University of Toronto

Program: