Abstract

As traditional interactions in the real-word move online, services that require veriﬁed personal information from web users will increase. We propose an architecture for the veriﬁcation of web user attributes without the use of cryptographic-based credentials. In this architecture, service providers are delegated a user's ability to directly contact a certifying party and retrieve attribute data. We demonstrate that this approach is simple for both developers and users, can be applied to existing Internet facilities and suﬃciently secure for typical web use cases.

Degree

College and Department

Physical and Mathematical Sciences; Computer Science

Rights

http://lib.byu.edu/about/copyright/