Model-based identity, authentication, and authorization in data ecosystems

RWTH Publications (RWTH Aachen)

Abstract

In the age of digital transformation, data ecosystems have emerged as critical enablers for cross-organizational collaboration and data-driven innovation. Within these environments, participants (i.e., organizations and individuals) act as constituents of data ecosystems, facilitating value creation. However, the heterogeneity of participants’ systems and security policies poses significant barriers to implementing secure, interoperable Identity, Authentication, and Authorization (IAA) solutions for intra- and inter-organizational data sharing. In this context, data ecosystems face two primary IAA challenges: 1) Complexity of selection and integration: The challenge of selecting and applying appropriate IAA mechanisms while considering participants’ specific security requirements; 2) Interoperability gap: The difficulty of enabling secure and interoperable interaction between participants that leverage disparate IAA concepts varying significantly in protocols, architectures, languages, and more. To tackle these interconnected challenges, this thesis proposes the Descriptions, Dimensions, and Deployments (D³) framework. This framework provides a comprehensive model-based approach that covers the entire “IAA lifecycle”, from conceptualization through implementation to deployment. Furthermore, by leveraging semantic modeling and morphological analysis, the framework facilitates interoperability of digital identities, enabling inter-organizational authentication and authorization. This approach effectively enhances both the compatibility and flexibility of IAA concepts within a data ecosystem, thereby establishing a security foundation for value-added chain creation. The key contributions of this thesis are: 1) Establishment of the IAA model library: The proposal of Digital Identity Description Language (DIDL) and Data Ecosystem Description Language (DEDL), which relate to authentication and authorization and together establish a comprehensive IAA model library that is applicable to centralized, decentralized, and federated data ecosystems; 2) IAA conceptualization and selection: The development of a morphological model-based approach and a selection tool that aids in the conceptualization and optimal selection of suitable IAA concepts; 3) IAA semantic interoperability: The provision of a semantic interoperability concept that enables the unified semantic annotation of heterogeneous IAA concepts with machine-readable semantic models, thereby bridging the interoperability gap.

Authors 1

1. Jiahang Chen corresponding Aachen

   RWTH Aachen University

   Affiliation as printed

   RWTH Aachen