{"id":"https://openalex.org/W4388850856","doi":"https://doi.org/10.1145/3605760.3623767","title":"Rethinking Single Sign-On: A Reliable and Privacy-Preserving Alternative with Verifiable Credentials","display_name":"Rethinking Single Sign-On: A Reliable and Privacy-Preserving Alternative with Verifiable Credentials","publication_year":2023,"publication_date":"2023-11-21","ids":{"openalex":"https://openalex.org/W4388850856","doi":"https://doi.org/10.1145/3605760.3623767"},"language":"en","primary_location":{"id":"doi:10.1145/3605760.3623767","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605760.3623767","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605760.3623767","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Workshop on Moving Target Defense","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3605760.3623767","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020317979","display_name":"Athan D. Johnson","orcid":null},"institutions":[{"id":"https://openalex.org/I143302722","display_name":"University of Kentucky","ror":"https://ror.org/02k3smh20","country_code":"US","type":"education","lineage":["https://openalex.org/I143302722"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Athan D. Johnson","raw_affiliation_strings":["University of Kentucky, Lexington, KY, USA"],"raw_orcid":"https://orcid.org/0009-0004-7969-6369","affiliations":[{"raw_affiliation_string":"University of Kentucky, Lexington, KY, USA","institution_ids":["https://openalex.org/I143302722"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024190370","display_name":"Ifteher Alom","orcid":"https://orcid.org/0009-0001-6719-8256"},"institutions":[{"id":"https://openalex.org/I143302722","display_name":"University of Kentucky","ror":"https://ror.org/02k3smh20","country_code":"US","type":"education","lineage":["https://openalex.org/I143302722"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ifteher Alom","raw_affiliation_strings":["University of Kentucky, Lexington, KY, USA"],"raw_orcid":"https://orcid.org/0009-0001-6719-8256","affiliations":[{"raw_affiliation_string":"University of Kentucky, Lexington, KY, USA","institution_ids":["https://openalex.org/I143302722"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009050006","display_name":"Yang Xiao","orcid":"https://orcid.org/0000-0002-0946-3197"},"institutions":[{"id":"https://openalex.org/I143302722","display_name":"University of Kentucky","ror":"https://ror.org/02k3smh20","country_code":"US","type":"education","lineage":["https://openalex.org/I143302722"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yang Xiao","raw_affiliation_strings":["University of Kentucky, Lexington, KY, USA"],"raw_orcid":"https://orcid.org/0000-0002-0946-3197","affiliations":[{"raw_affiliation_string":"University of Kentucky, Lexington, KY, USA","institution_ids":["https://openalex.org/I143302722"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I143302722"],"apc_list":null,"apc_paid":null,"fwci":3.1569,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92810138,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"25","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/single-sign-on","display_name":"Single sign-on","score":0.8184136152267456},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.807335376739502},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7606798410415649},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.7385725975036621},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6669133901596069},{"id":"https://openalex.org/keywords/identity-management","display_name":"Identity management","score":0.5049977898597717},{"id":"https://openalex.org/keywords/single-point-of-failure","display_name":"Single point of failure","score":0.4960955083370209},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.468993216753006},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.4682313799858093},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4542127847671509},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.45168739557266235},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.43924954533576965},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.4217950999736786},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3441472053527832},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2594025731086731},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.23230522871017456},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13015049695968628},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.09505736827850342},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.08685752749443054}],"concepts":[{"id":"https://openalex.org/C2776362682","wikidata":"https://www.wikidata.org/wiki/Q568494","display_name":"Single sign-on","level":3,"score":0.8184136152267456},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.807335376739502},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7606798410415649},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.7385725975036621},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6669133901596069},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.5049977898597717},{"id":"https://openalex.org/C165136773","wikidata":"https://www.wikidata.org/wiki/Q1363179","display_name":"Single point of failure","level":2,"score":0.4960955083370209},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.468993216753006},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.4682313799858093},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4542127847671509},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.45168739557266235},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.43924954533576965},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.4217950999736786},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3441472053527832},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2594025731086731},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.23230522871017456},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13015049695968628},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.09505736827850342},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08685752749443054},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3605760.3623767","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605760.3623767","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605760.3623767","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Workshop on Moving Target Defense","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3605760.3623767","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605760.3623767","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605760.3623767","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Workshop on Moving Target Defense","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.46000000834465027,"id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388850856.pdf","grobid_xml":"https://content.openalex.org/works/W4388850856.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W1521092767","https://openalex.org/W1590713339","https://openalex.org/W1963828660","https://openalex.org/W2053070160","https://openalex.org/W2089775132","https://openalex.org/W2113085788","https://openalex.org/W2116344740","https://openalex.org/W2133723082","https://openalex.org/W2152175487","https://openalex.org/W2725419186","https://openalex.org/W2926987861","https://openalex.org/W3094299549","https://openalex.org/W3098532907","https://openalex.org/W3156123088","https://openalex.org/W3211475103","https://openalex.org/W4200456863"],"related_works":["https://openalex.org/W2490563716","https://openalex.org/W2185800392","https://openalex.org/W4387766710","https://openalex.org/W2114730203","https://openalex.org/W1844704486","https://openalex.org/W2213995339","https://openalex.org/W2082874810","https://openalex.org/W3031028275","https://openalex.org/W3062861","https://openalex.org/W4284961148"],"abstract_inverted_index":{"Single":[0],"sign-on":[1],"(SSO)":[2],"has":[3,128],"provided":[4],"convenience":[5],"to":[6,18,64,94,100,115,168],"users":[7,169],"in":[8,88],"the":[9,25,43,54,66,77,97,113,123,134,137,141,149,154],"web":[10],"domain":[11],"as":[12],"it":[13],"can":[14],"authorize":[15],"a":[16,90,102,130,158],"user":[17,91,145],"access":[19,116],"various":[20],"resource":[21],"providers":[22],"(RPs)":[23],"using":[24],"identity":[26,47],"provider":[27],"(IdP)'s":[28],"unified":[29],"authentication":[30],"portal.":[31],"However,":[32],"SSO":[33,60,160],"also":[34],"faces":[35],"security":[36,67],"problems":[37,70],"including":[38],"IdP":[39,98,135],"single-point":[40],"failure":[41],"and":[42,68,83,104,140,166],"privacy":[44,69,167],"associated":[45],"with":[46,96,133],"linkage.":[48],"In":[49],"this":[50],"paper,":[51],"we":[52],"present":[53],"initial":[55],"design":[56,124,152],"of":[57],"an":[58],"alternative":[59],"solution":[61],"called":[62],"VC-SSO":[63,75,151],"address":[65],"while":[71],"preserving":[72],"SSO's":[73],"usability.":[74],"leverages":[76],"recently":[78],"emerged":[79],"decentralized":[80],"identifier":[81],"(DID)":[82],"verifiable":[84,109],"credential":[85],"(VC)":[86],"framework":[87],"that":[89,125,162],"only":[92],"needs":[93],"authenticate":[95],"once":[99],"obtain":[101],"VC":[103,114],"then":[105],"may":[106],"generate":[107],"multiple":[108],"presentations":[110],"(VPs)":[111],"from":[112],"different":[117],"RPs.":[118],"This":[119],"is":[120],"based":[121],"on":[122],"each":[126],"RP":[127],"established":[129],"smart":[131],"contract":[132],"specifying":[136],"service":[138],"agreement":[139],"VP":[142],"schema":[143],"for":[144],"authorization.":[146],"We":[147],"hope":[148],"proposed":[150],"marks":[153],"first":[155],"step":[156],"toward":[157],"future":[159],"system":[161],"provides":[163],"strong":[164],"reliability":[165],"under":[170],"adversarial":[171],"conditions.":[172]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}