z-logo
open-access-imgOpen Access
Improved Identity Management with Verifiable Credentials and FIDO
Author(s) -
David Chadwick,
Romain Laborde,
Arnaud Oglaza,
Rémi Venant,
Samer Wazan,
Manreet Nijjar
Publication year - 2019
Publication title -
ieee communications standards magazine
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 1.509
H-Index - 18
eISSN - 2471-2833
pISSN - 2471-2825
DOI - 10.1109/mcomstd.001.1900020
Subject(s) - computer science , verifiable secret sharing , authentication (law) , identity (music) , password , identity management , order (exchange) , authorization , computer security , protocol (science) , medicine , business , physics , set (abstract data type) , finance , acoustics , programming language , alternative medicine , pathology
We describe how FIDO and W3C VCs can overcome the problems of existing identity management systems. We describe our conceptual model and architecture, and the protocol we used by extending FIDO's UAF in order to provide both strong authentication and strong authorization. We built a pilot implementation for U.K. NHS patients to validate our implementation. Patients were able to use a mobile phone with a fingerprint reader to access restricted NHS sites in order to make and cancel appointments and order repeat prescription drugs. Our initial user trials with 10 U.K. NHS patients found the system to be easy to use, and fingerprints to be preferable to using usernames and passwords for authentication.

The content you want is available to Zendy users.

Already have an account? Click here to sign in.
Having issues? You can contact us here
Accelerating Research

Address

John Eccles House
Robert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom