Abstract:In a ubiquitous environment enclosing cooperative Internet-of-Things (IoT) devices, individuals, and entities, digital identity management (DIM) becomes critical and challenging. DIM pertains to device identities authentication and verification to enable trustworthy service exchange, data collection, and decision making. DIM is the supporting pillar for all online services and the foundation for security and authentication mechanisms. Due to the extreme heterogeneity, scale, and configuration complexity of such environments, enabling trustworthy DIM is crucial and seriously challenging. In an IoT context, devices use local digital identities stored within a tamper-proof unit and verified by a centralized authority for authentication. The recent attacks on IoT systems showed how vulnerable such a design is. It is also an inherent problem that influences humans. From that, self-sovereign identity (SSI) has emerged as a decentralized DIM approach embracing the concept of portable self-possession identity. SSI was presented to couple the digital identity from the owner to enable large-scale cooperation. However, digital identity storage and verification still occur on the device and in a centralized manner. Utilizing a local single-point-of-failure storage memory for verifiable credentials is one of the considerable drawbacks in contemporary SSI. In this regard, this article introduces decentralized trustworthy-self-sovereign identity management (DT-SSIM), a novel decentralized trustworthy SSI management framework. DT-SSIM integrates the secret share scheme with the blockchain-based smart contracts technologies to provide transparent and trustworthy SSI-based DIM services for IoT. Storing IoT identity credentials outside the devices' local storage preserves the identity credentials from being tampered with or misused. Evaluations and discussions show the resiliency assessment of the system and the cost and estimated running times for verification pro-esses in DT-SSIM.

Secure Decentralized Machine Identifiers For Internet Of Things

SmartDID: A Novel Privacy-preserving Identity based on Blockchain for IoT

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

DT-SSIM: A Decentralized Trustworthy Self-Sovereign Identity Management Framework

Communication is Verification: IoT Identifier System Using Device Fingerprints

Secure Ownership Management and Transfer of Consumer Internet of Things Devices with Self-sovereign Identity

DIdM-EIoTD: Distributed Identity Management for Edge Internet of Things (IoT) Devices

Scalable Identifier System for Industrial Internet Based on Multi-Identifier Network Architecture

SSI4IoT: Unlocking the Potential of IoT Tailored Self-Sovereign Identity

Reliable and Adaptive Distributed Public-Key Management Infrastructure for the Internet of Things

Identity Identification and Management in the Internet of Things

UniquID: A Quest to Reconcile Identity Access Management and the Internet of Things

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things

Data Security Transmission and Privacy Protection Scheme for Industrial Internet of Things

A decentralized lightweight blockchain-based authentication mechanism for Internet of Vehicles

Blockchain-Assisted Secure Intra/Inter-Domain Authorization and Authentication for Internet of Things

A secure blockchain-enabled vehicle identity management framework for intelligent transportation systems

A novel mutual authentication scheme for Internet of Things

Towards Decentralized IoT Security Enhancement: A Blockchain Approach

An automatized Identity and Access Management system for IoT combining Self-Sovereign Identity and smart contracts

An Identity Management Framework for Internet of Things