Regresar

A Blockchain-Based Model for OAuth Authorization via Third-Party Web Application

Abstract:

Authentication and authorization are critical factors for network security. In this context, three problems were identified. First, password fatigue, the difficulty of remembering a password when Internet service usage increases. Second, services centralization; that is, the dependence on a single entity for the operations management, which can infringe the privacy of users. Third, lack of service availability; it means, the permanent, or temporary suspension of the service. Denial-of-Service attacks denials cause delays in response times, and severe interruptions to centralized schemes. Faced with these challenges, this research proposes a blockchain-based model for OAuth authorization via third-party web application. For this, the versatilities that both technologies provide to solve the aforementioned issues. Then, it explains how together blockchain and OAuth 2.0 grant access to a web resource via a third-party web application. Consequently, a model is developed and addressed using smart contracts and web forms. To demonstrate the validity of our model, we propose a study case for a user to access a web resource using a third-party web application. Finally, conclusions and future work are described at the end of the paper.