978-1-5386-8317-0/19/$31.00 ©2019 IEEE
Analysis of Identity Management Systems Using
Blockchain Technology
Samia El Haddouti
Information Security Research Team, CEDOC ST2I
ENSIAS
Mohamed V University
Rabat, Morocco
samia_elhaddouti@um5.ac.ma
M. Dafir Ech-Cherif El Kettani
Information Security Research Team, CEDOC ST2I
ENSIAS
Mohamed V University
Rabat, Morocco
dafir.elkettani@um5.ac.ma
Abstract—The emergence of Blockchain technology as the
biggest innovations of the 21
st
century, has given rise to new
concepts of Identity Management to deal with the privacy and
security challenges on the one hand, and to enhance the
decentralization and user control in transactions on Blockchain
infrastructures on the other hand. This paper investigates and
gives analysis of the most popular Identity Management
Systems using Blockchain: uPort, Sovrin, and ShoCard. It then
evaluates them under a set of features of digital identity that
characterizes the successful of an Identity Management
solution. The result of the comparative analysis is presented in
a concise way to allow readers to find out easily which systems
satisfy what requirements in order to select the appropriate
one to fit into a specific scenario.
Keywords— Blockchain, Digital Identity, Identity
Management, Self-Sovereign Identity.
I. INTRODUCTION
In an increasingly digital ecosystem with a variety of
online services, entities need to possess digital identities for
their identification by allowing them to interact with each
other on the online world, while protecting their identity
information. In the early 1990s, the authentication method
based on username and password was commonly used by
individuals during an access process, with a management of
dozens of identities as a result of the registration into several
Service Providers. However, the process for identifying,
authenticating and authorizing individuals to access easily
different resources and services requires mechanisms to
control information about individuals. Adding to the
complexity of the modern Identity and Access Management
challenge, the demand for secure access poses a serious
challenge for Information and Technology staff that has
simultaneously to meet the access need of users and to
ensure the security of their data.
To overcome these demands access with a certain level of
security and data protection, Identity and Access
Management solutions have been introduced by which
identity lifecycle is managed while allowing users to access
to appropriate resources, at the right time and in the right
context while saving cost and time [1].
Despite the solutions given by current Identity Management
technologies to improve the management of user
authentication and resources access, they still suffer from
several limitations and they are not optimal to ensure data
protection against abuse, fraud and criminality. Surveys
conducted by the European Commission shows that people
have the feeling they do not have any control over their
personal data [2]. Closely related to data protection,
centralized identity services that exist today fail to operate
transparently and protect the rights of users.
Several of these risks can possibly be avoided by using
Blockchain technology [3]. A literary study made clear that
this technology can add significant value in managing
identities by returning the ownership of identity to the
individual as an owner of this identity. Furthermore, the
combination of Identity Management with Blockchain
technology enables decentralized identity storage, avoids a
central authentication authority and prevents tampering with
the identities and the stored data.
In view of all that, several initiatives put its research efforts
into building consistent and robust approaches of Identity
Management based on Blockchain technology with a variety
of use-cases.
In this paper, we investigate, evaluate and compare three
main Identity Management systems based on Blockchain.
The structure of this paper is as follows: after this
introduction, we discuss the related works in Section II
.Section III defines the digital identity with its related
concepts. Section IV presents the evolution of digital
identity models. In Section V, we give an overview of
Blockchain technology. Section VI introduces current
approaches related to Identity Management systems using
Blockchain. It begins with an overview and a description of
each system, followed by analysis and evaluations whether
systems fulfill predefined requirements related to the digital
identity. Section VII serves as conclusions.
II. RELATED WORK
Improving Identity Management using Blockchain
technology has been an active research field for the last
years. Many Identity Management solutions that are based
on Blockchain currently are available. There are existing
different studies of these solutions.
In [4], authors present briefly a typology of Blockchain
applications including some Identity Management solutions
like Civic, Blockchain Helix and Bitnation. This work is
limited in the sense that they have not dealt with technical
details of each solution. A couple of examples for other
attempts with the same objective can be found in [5] and [6]
in which a set of Blockchain-based Identity Management
systems have been analyzed.
However, the current work provides improvements of over
other studies. It provides and explains comprehensive