OATAO - Open Archive Toulouse Archive Ouverte Open Access Week

Improved Identity Management with Verifiable Credentials and FIDO

Chadwick, David W. and Laborde, Romain and Oglaza, Arnaud and Venant, Rémi and Wazan, Ahmad Samer and Nijjar, Manreet Improved Identity Management with Verifiable Credentials and FIDO. (2019) IEEE Communications Standards Magazine, 3 (4). 14-20. ISSN 2471-2825

(Document in English)

PDF (Author's version) - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader

Official URL: https://doi.org/10.1109/MCOMSTD.001.1900020


We describe how FIDO and W3C VCs can overcome the problems of existing identity management systems. We describe our conceptual model and architecture, and the protocol we used by extending FIDO's UAF in order to provide both strong authentication and strong authorization. We built a pilot implementation for U.K. NHS patients to validate our implementation. Patients were able to use a mobile phone with a fingerprint reader to access restricted NHS sites in order to make and cancel appointments and order repeat prescription drugs. Our initial user trials with 10 U.K. NHS patients found the system to be easy to use, and fingerprints to be preferable to using usernames and passwords for authentication.

Item Type:Article
Additional Information:Thanks to IEEE editor. The definitive version is available at http://ieeexplore.ieee.org The original PDF can be found at IEEE Communications Standards Magazine (ISSN: 2471-2825) website : https://ieeexplore.ieee.org/document/9031543 Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
HAL Id:hal-02950805
Audience (journal):International peer-reviewed journal
Uncontrolled Keywords:
Institution:French research institutions > Centre National de la Recherche Scientifique - CNRS (FRANCE)
Université de Toulouse > Institut National Polytechnique de Toulouse - Toulouse INP (FRANCE)
Other partners > University of Kent (UNITED KINGDOM)
Université de Toulouse > Université Toulouse III - Paul Sabatier - UT3 (FRANCE)
Université de Toulouse > Université Toulouse - Jean Jaurès - UT2J (FRANCE)
Université de Toulouse > Université Toulouse 1 Capitole - UT1 (FRANCE)
Other partners > Université Nantes Angers Le Mans - UNAM (FRANCE)
Other partners > Zayed University - ZU (UNITED ARAB EMIRATES)
Laboratory name:
Deposited On:18 Sep 2020 14:20

Repository Staff Only: item control page