DAuth: A Decentralized Web Authentication System using Ethereum based Blockchain
Shibasis Patel, Anisha Sahoo, Bhabendu Kumar Mohanta, Soumyashree Subhadarsini Panda, Debasish Jena · 2019 International Conference on Vision Towards Emerging Trends in Communication and Networking (ViTECoN) · 2019
Over the past decade, a lot of evolution has happened in the field of security specifically authentication system. The most commonly used authentication service we use now is OAuth 2.0 based authentication. In this method, we are dependent on a 3rd party authentication service provider to which we need to trust. Though this model is used extensively nowadays, studies show that it is still vulnerable to several hacks. In addition to that, the 3rd party authentication provider has total control over the user data to which they can leak or modify at their will. Thus the use of OAuth 2.0 based protocol has raised security and privacy concerns. In this paper, blockchain and its use cases are studied and an alternative way of authentication service has been proposed based on Ethereum Blockchain called DAuth. Furthermore, a prototype has been developed which enables user authentication on the site. DAuth proposes to enhance transparency and user control in transactions which involves identity management.