-
A Universal System for OpenID Connect Sign-ins with Verifiable Credentials and Cross-Device Flow
Authors:
Felix Hoops,
Florian Matthes
Abstract:
Self-Sovereign Identity (SSI), as a new and promising identity management paradigm, needs mechanisms that can ease a gradual transition of existing services and developers towards it. Systems that bridge the gap between SSI and established identity and access management have been proposed but still lack adoption. We argue that they are all some combination of too complex, locked into specific ecos…
▽ More
Self-Sovereign Identity (SSI), as a new and promising identity management paradigm, needs mechanisms that can ease a gradual transition of existing services and developers towards it. Systems that bridge the gap between SSI and established identity and access management have been proposed but still lack adoption. We argue that they are all some combination of too complex, locked into specific ecosystems, have no source code available, or are not sufficiently documented. We propose a comparatively simple system that enables SSI-based sign-ins for services that support the widespread OpenID Connect or OAuth 2.0 protocols. Its handling of claims is highly configurable through a single policy and designed for cross-device authentication flows involving a smartphone identity wallet. For external interfaces, we solely rely on open standards, such as the recent OpenID for Verifiable Credentials standards. We provide our implementation as open-source software intended for prototyping and as a reference. Also, we contribute a detailed technical discussion of our particular sign-in flow. To prove its feasibility, we have successfully tested it with existing software and realistic hardware.
△ Less
Submitted 16 January, 2024;
originally announced January 2024.
-
A Taxonomy of Decentralized Identifier Methods for Practitioners
Authors:
Felix Hoops,
Alexander Mühle,
Florian Matthes,
Christoph Meinel
Abstract:
A core part of the new identity management paradigm of Self-Sovereign Identity (SSI) is the W3C Decentralized Identifiers (DIDs) standard. The diversity of interoperable implementations encouraged by the paradigm is key for a less centralized future, and it is made possible by the concept of DIDs. However, this leads to a kind of dilemma of choices, where practitioners are faced with the difficult…
▽ More
A core part of the new identity management paradigm of Self-Sovereign Identity (SSI) is the W3C Decentralized Identifiers (DIDs) standard. The diversity of interoperable implementations encouraged by the paradigm is key for a less centralized future, and it is made possible by the concept of DIDs. However, this leads to a kind of dilemma of choices, where practitioners are faced with the difficult decision of which methods to choose and support in their applications. Due to the decentralized development of DID method specifications and the overwhelming number of different choices, it is hard to get an overview. In this paper, we propose a taxonomy of DID methods with the goal to empower practitioners to make informed decisions when selecting DID methods. To that end, our taxonomy is designed to provide an overview of the current landscape while providing adoption-relevant characteristics. For this purpose, we rely on the Nickerson et al. methodology for taxonomy creation, utilizing both conceptual-to-empirical and empirical-to-conceptual approaches. During the iterative process, we collect and survey an extensive and potentially exhaustive list of around 160 DID methods from various sources. The taxonomy we arrive at uses a total of 7 dimensions and 22 characteristics to span the contemporary design space of DID methods from the perspective of a practitioner. In addition to elaborating on these characteristics, we also discuss how a practitioner can use the taxonomy to select suitable DID methods for a specific use case.
△ Less
Submitted 18 October, 2023;
originally announced November 2023.
-
A Study of MEV Extraction Techniques on a First-Come-First-Served Blockchain
Authors:
Burak Öz,
Filip Rezabek,
Jonas Gebele,
Felix Hoops,
Florian Matthes
Abstract:
Maximal Extractable Value (MEV) has become a significant incentive on blockchain networks, referring to the value captured through the manipulation of transaction execution order and strategic issuance of profit-generation transactions. We argue that transaction ordering techniques used for MEV extraction in blockchains where fees can influence the execution order do not directly apply to blockcha…
▽ More
Maximal Extractable Value (MEV) has become a significant incentive on blockchain networks, referring to the value captured through the manipulation of transaction execution order and strategic issuance of profit-generation transactions. We argue that transaction ordering techniques used for MEV extraction in blockchains where fees can influence the execution order do not directly apply to blockchains where the order is determined based on transactions' arrival times. Such blockchains' First-Come-First-Served (FCFS) nature can yield different optimization strategies for entities seeking MEV, known as searchers, requiring further study. This paper explores the applicability of MEV extraction techniques observed on Ethereum, a fee-based blockchain, to Algorand, an FCFS blockchain. Our results show the prevalence of arbitrage MEV getting extracted through backruns on pending transactions in the network, uniformly distributed to block positions. However, on-chain data do not reveal latency optimizations between specific MEV searchers and Algorand block proposers. We also study network clogging attacks and argue how searchers can exploit them as a viable ordering technique for MEV extraction in FCFS networks.
△ Less
Submitted 15 January, 2024; v1 submitted 12 August, 2023;
originally announced August 2023.
