Local user-centric identity management

Audun Jøsang (1) , Christophe Rosenberger (2) , Laurent Miralabé (3) , Henning Klevjer (4) , Kent Varmedal (5) , Jérôme Daveau (6) , Knut Eilif Husa (4) , Petter Taugbøl (7)

1 UNIK - University Graduate Center [Kjeller]
2 Equipe SAFE - Laboratoire GREYC - UMR6072
3 TazTag
4 Tell.u [Asker]
5 Department of Informatics [Oslo]
6 cev alios
7 Valvi

Identity management is a rather general concept that covers technologies, policies and procedures for recognising and authenticating entities in ICT environments. Current identity management solutions often have inadequate usability and scalability, or they provide inadequate authentication assurance. This article describes local user-centric identity management as an approach to providing scalable, secure and user friendly identity management. This approach is based on placing technology for identity management on the user side, instead of on the server side or in the cloud. This approach strengthens authentication assurance, improves usability, minimizes trust requirements, and has the advantage that trusted online interaction can be upheld even in the presence of malware infection in client platforms. More specifically, our approach is based on using an OffPAD (Offline Personal Authentication Device) as a trusted device to support the different forms of authentication that are necessary for trusted interactions. A prototype OffPAD has been implemented and tested in user experiments.

Mots clés: OffPAD; Trust; Authentication

Domaines: Cryptographie et sécurité [cs.CR]

Audun Jøsang, Christophe Rosenberger, Laurent Miralabé, Henning Klevjer, Kent Varmedal, et al.. Local user-centric identity management. Journal of trust management, 2015, 2, pp.1. ⟨10.1186/s40493-014-0009-6⟩. ⟨hal-01109122⟩