Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation

Dmitrij Lagutin; Yki Kortesniemi; Nikos Fotiou; Vasilios A. Siris

doi:10.14722/diss.2019.23005

Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation

Dmitrij Lagutin, Yki Kortesniemi, Nikos Fotiou, Vasilios A. Siris

Athens University of Economics and Business

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

143 Downloads (Pure)

Abstract

Decentralised identiﬁers (DIDs) and veriﬁable credentials (VCs) are upcoming standards for self-sovereign privacy-preserving identiﬁers and authorisation, respectively. This focus on privacy can help improve many services and open up new business models, but using DIDs and VCs directly on constrained IoT devices can be problematic due to the management and resource overhead. This paper presents an OAuth-based method to delegate the processing and access policy management to the Authorisation Server thus allowing also systems with constrained IoT devices to beneﬁt from DIDs and VCs.

Original language	English
Title of host publication	Proceedings of DISS 2019 – Workshop on Decentralized IoT Systems and Security
Publisher	Internet Society
Number of pages	6
ISBN (Electronic)	1-891562-56-8
DOIs	https://doi.org/10.14722/diss.2019.23005
Publication status	Published - 2019
MoE publication type	A4 Conference publication
Event	Workshop on Decentralized IoT Systems and Security - San Diego, United States Duration: 24 Feb 2019 → 24 Feb 2019 https://www.ndss-symposium.org/ndss2019/cfp-diss-2019/

Workshop

Workshop	Workshop on Decentralized IoT Systems and Security
Abbreviated title	DISS
Country/Territory	United States
City	San Diego
Period	24/02/2019 → 24/02/2019
Internet address	https://www.ndss-symposium.org/ndss2019/cfp-diss-2019/

Keywords

Internet of Things
authorisation
decentralised identiﬁers
veriﬁable credentials
privacy
OAuth
ACE

Access to Document

10.14722/diss.2019.23005

ELEC_Lagutin_Enabling_NDSS2019_DISSFinal published version, 463 KB

SOFIE: Secure Open Federation for Internet Everywhere
Nikander, P. (Principal investigator), Huttunen, J. (Project Member), Lassila, P. (Project Member), Elo, T. (Project Member), Hoseini, S. (Project Member), Lisi, A. (Project Member), Paavolainen, S. (Project Member), Lagutin, D. (Project Member), Mattila, J. (Project Member), Ruutu, S. (Project Member), Kortesniemi, Y. (Project Member), Pahlevan, M. (Project Member) & Wu, L. (Project Member)
27/12/2017 → 31/12/2020
Project: EU: Framework programmes funding
TrustNet: Trust Network for Distributed Personal Data Management
Turpeinen, M. (Principal investigator), Kortesniemi, Y. (Project Member), Poikola, A. (Project Member), Lähteenoja, V. (Project Member) & Mällo, T. (Project Member)
01/10/2017 → 30/06/2019
Project: Business Finland: Other research funding

Cite this

@inproceedings{a7af2fd5d16b480d8e28cdbc8aaaaf16,

title = "Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation",

abstract = "Decentralised identiﬁers (DIDs) and veriﬁable credentials (VCs) are upcoming standards for self-sovereign privacy-preserving identiﬁers and authorisation, respectively. This focus on privacy can help improve many services and open up new business models, but using DIDs and VCs directly on constrained IoT devices can be problematic due to the management and resource overhead. This paper presents an OAuth-based method to delegate the processing and access policy management to the Authorisation Server thus allowing also systems with constrained IoT devices to beneﬁt from DIDs and VCs.",

keywords = "Internet of Things, authorisation, decentralised identiﬁers, veriﬁable credentials, privacy, OAuth, ACE",

author = "Dmitrij Lagutin and Yki Kortesniemi and Nikos Fotiou and Siris, {Vasilios A.}",

note = "| openaire: EC/H2020/779984/EU//SOFIE; Workshop on Decentralized IoT Systems and Security, DISS ; Conference date: 24-02-2019 Through 24-02-2019",

year = "2019",

doi = "10.14722/diss.2019.23005",

language = "English",

booktitle = "Proceedings of DISS 2019 – Workshop on Decentralized IoT Systems and Security",

publisher = "Internet Society",

address = "United States",

url = "https://www.ndss-symposium.org/ndss2019/cfp-diss-2019/",

}

Lagutin, D, Kortesniemi, Y, Fotiou, N & Siris, VA 2019, Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation. in Proceedings of DISS 2019 – Workshop on Decentralized IoT Systems and Security. Internet Society, Workshop on Decentralized IoT Systems and Security, San Diego, California, United States, 24/02/2019. https://doi.org/10.14722/diss.2019.23005

Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation. / Lagutin, Dmitrij; Kortesniemi, Yki; Fotiou, Nikos et al.
Proceedings of DISS 2019 – Workshop on Decentralized IoT Systems and Security. Internet Society, 2019.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation

AU - Lagutin, Dmitrij

AU - Kortesniemi, Yki

AU - Fotiou, Nikos

AU - Siris, Vasilios A.

N1 - | openaire: EC/H2020/779984/EU//SOFIE

PY - 2019

Y1 - 2019

N2 - Decentralised identiﬁers (DIDs) and veriﬁable credentials (VCs) are upcoming standards for self-sovereign privacy-preserving identiﬁers and authorisation, respectively. This focus on privacy can help improve many services and open up new business models, but using DIDs and VCs directly on constrained IoT devices can be problematic due to the management and resource overhead. This paper presents an OAuth-based method to delegate the processing and access policy management to the Authorisation Server thus allowing also systems with constrained IoT devices to beneﬁt from DIDs and VCs.

AB - Decentralised identiﬁers (DIDs) and veriﬁable credentials (VCs) are upcoming standards for self-sovereign privacy-preserving identiﬁers and authorisation, respectively. This focus on privacy can help improve many services and open up new business models, but using DIDs and VCs directly on constrained IoT devices can be problematic due to the management and resource overhead. This paper presents an OAuth-based method to delegate the processing and access policy management to the Authorisation Server thus allowing also systems with constrained IoT devices to beneﬁt from DIDs and VCs.

KW - Internet of Things

KW - authorisation

KW - decentralised identiﬁers

KW - veriﬁable credentials

KW - privacy

KW - OAuth

KW - ACE

U2 - 10.14722/diss.2019.23005

DO - 10.14722/diss.2019.23005

M3 - Conference article in proceedings

BT - Proceedings of DISS 2019 – Workshop on Decentralized IoT Systems and Security

PB - Internet Society

T2 - Workshop on Decentralized IoT Systems and Security

Y2 - 24 February 2019 through 24 February 2019

ER -

Enabling Decentralised Identiﬁers and Veriﬁable Credentials for Constrained IoT Devices using OAuth-based Delegation

Abstract

Workshop

Keywords

Access to Document

Fingerprint

Projects

SOFIE: Secure Open Federation for Internet Everywhere

TrustNet: Trust Network for Distributed Personal Data Management

Cite this