LoginSoEasy: a System Enabling both Authentication and Protection of Personal Information based on Trusted User Agent
Wenyin Liu, Lin Yin, Zongcheng Qi, Zekai Wu, Guipeng Zhang, Kai You Wang, Shuai Fan, Zhenguo Yang · 2021
An ecosystem based on LoginSoEasy, which enables both authentication and protection of personal information is proposed. It works as a hub connecting all application servers on the one hand, and all information/verification services on the other hand. In such ecosystem, a user's personal information is stored and managed by his trusted user agent only, and could be verified by an authoritative information/verification service only after authorized by the user. The user agent, which could be a mobile app, stores all personal information the user wishes to store, or otherwise obtains instant input from the user on demand. The trusted user agent is also used to help the user to automatically register for an anonymous and unlinkable account ID with a strong password on each application server. Any other personal information necessary for a business can be obtained on demand. The application server no longer needs to store other personal information for the user, and therefore would never be blamed for any leakage, while no business would be impeded. Analyses have been conducted to show its effectiveness to prevent vast amount breaches of personal information.