A Security Analysis of Blockchain-Based Did Services

【Author】 Kim, Bong Gon; Cho, Young-Seob; Kim, Seok-Hyun; Kim, Hyoungshick; Woo, Simon S.

【Source】IEEE ACCESS

【影响因子】3.476

【Abstract】Decentralized identifiers (DID) has shown great potential for sharing user identities across different domains and services without compromising user privacy. DID is designed to enable the minimum disclosure of the proof from a user's credentials on a need-to-know basis with a contextualized delegation. At first glance, DID appears to be well-suited for this purpose. However, the overall security of DID has not been thoroughly examined. In this paper, we systemically explore key components of DID systems and analyze their possible vulnerabilities when deployed. First, we analyze the data flow between DID system components and analyze possible security threats. Next, we carefully identify potential security threats over seven different DID functional domains, ranging from user wallet to universal resolver. Lastly, we discuss the possible countermeasures against the security threats we identified.

【Keywords】Security; Blockchain; Authentication; Licenses; Computer crime; Privacy; Planning; DID; decentralized key management system (DKMS); universal resolver; blockchain; data exfiltration; blockchain redaction; attack surface

【发表时间】2021

【收录时间】2022-01-02

【文献类型】

【主题类别】

--