An Architecture for Distributed Digital Identities in the Physical World

TL;DR

This paper proposes a decentralized architecture for managing digital identities in physical world transactions, enhancing privacy and availability by avoiding centralized control, and verifies its security and practical feasibility.

Contribution

It introduces the Personal Identity Agent (PIA) and a new protocol for secure, decentralized identity transactions in physical contexts.

Findings

Formal security verification of the protocol

Prototype implementation demonstrating practicality

Supports transactions with latency of a few seconds

Abstract

Digital identities are increasingly important for mediating not only digital but also physical service transactions. Managing such identities through centralized providers can cause both availability and privacy concerns: single points of failure and control are ideal targets for global attacks on technical, organizational, or legal fronts. We design, analyze, and build a distributed digital identity architecture for physical world transactions in common scenarios like unlocking doors, public transport, or crossing country borders. This architecture combines (biometric and other) sensors, (established and upcoming) identity authorities, attribute verifiers, and a new core component we call the \emph{Personal Identity Agent (PIA)} that represents individuals with their identity attributes in the digital domain. All transactions are conducted in a completely decentralized manner, and the components for which we currently assume central coordination are optional and only used for assisting with service discovery and latency reduction. We present a first protocol between these parties and formally verify that it achieves relevant security properties based on a realistic threat model including strong global adversaries. A proof-of-concept implementation demonstrates practical feasibility of both architecture and initial protocol for applications that can tolerate end-to-end latencies in the range of a few seconds.