A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility

Traditional identity management (IdM) solutions based on centralised protocols, such as Lightweight Directory Access Protocol (LDAP) and Security Assertion Markup Language (SAML), are where a central authority manages all the processes. This risks a single point of failure and other vulnerabilities....

Full description

Saved in:
Bibliographic Details
Main Authors: Aviral Goel, Yogachandran Rahulamathavan
Format: Article
Language:English
Published: MDPI AG 2024-12-01
Series:Future Internet
Subjects:
Online Access:https://www.mdpi.com/1999-5903/17/1/1
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832588434374393856
author Aviral Goel
Yogachandran Rahulamathavan
author_facet Aviral Goel
Yogachandran Rahulamathavan
author_sort Aviral Goel
collection DOAJ
description Traditional identity management (IdM) solutions based on centralised protocols, such as Lightweight Directory Access Protocol (LDAP) and Security Assertion Markup Language (SAML), are where a central authority manages all the processes. This risks a single point of failure and other vulnerabilities. In response, decentralised techniques like blockchain and decentralised identities (DIDs) are being explored. This review paper performs a comparison of popular decentralised identity management (DIM) protocols, such as self-sovereign identity (SSI), against traditional centralised approaches such as LDAP and SAML. These decentralised identity management systems are being developed, keeping users’ identity data as its highest priority. Additionally, this method eliminates the need for a central authority to manage and secure the system. To further explore the potential of decentralised identity management, this study delves into popular blockchain-based decentralised identity management systems such as uPort, Sovrin, EverID, Blockstack, ShoCard, and Hyperledger Indy. We analyse their underlying principles and compare them with the well-established centralised identity management solutions, focusing on key aspects such as scalability, security, and feasibility. However, despite their benefits and several worthy developments in this field, decentralised approaches are still not widely used. Through this study, we investigate both centralised and decentralised methods and review their strengths and weaknesses. By reviewing multiple research papers, this survey aims to provide an understanding and aid in selecting the most suitable identity management system for different use cases.
format Article
id doaj-art-ac9989afaeaf45cab7125d34ea809871
institution Kabale University
issn 1999-5903
language English
publishDate 2024-12-01
publisher MDPI AG
record_format Article
series Future Internet
spelling doaj-art-ac9989afaeaf45cab7125d34ea8098712025-01-24T13:33:31ZengMDPI AGFuture Internet1999-59032024-12-01171110.3390/fi17010001A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and FeasibilityAviral Goel0Yogachandran Rahulamathavan1Institute for Digital Technologies, Loughborough University, Loughborough LE11 3TU, UKInstitute for Digital Technologies, Loughborough University, Loughborough LE11 3TU, UKTraditional identity management (IdM) solutions based on centralised protocols, such as Lightweight Directory Access Protocol (LDAP) and Security Assertion Markup Language (SAML), are where a central authority manages all the processes. This risks a single point of failure and other vulnerabilities. In response, decentralised techniques like blockchain and decentralised identities (DIDs) are being explored. This review paper performs a comparison of popular decentralised identity management (DIM) protocols, such as self-sovereign identity (SSI), against traditional centralised approaches such as LDAP and SAML. These decentralised identity management systems are being developed, keeping users’ identity data as its highest priority. Additionally, this method eliminates the need for a central authority to manage and secure the system. To further explore the potential of decentralised identity management, this study delves into popular blockchain-based decentralised identity management systems such as uPort, Sovrin, EverID, Blockstack, ShoCard, and Hyperledger Indy. We analyse their underlying principles and compare them with the well-established centralised identity management solutions, focusing on key aspects such as scalability, security, and feasibility. However, despite their benefits and several worthy developments in this field, decentralised approaches are still not widely used. Through this study, we investigate both centralised and decentralised methods and review their strengths and weaknesses. By reviewing multiple research papers, this survey aims to provide an understanding and aid in selecting the most suitable identity management system for different use cases.https://www.mdpi.com/1999-5903/17/1/1centraliseddecentralisedidentityauthenticationblockchainscalability
spellingShingle Aviral Goel
Yogachandran Rahulamathavan
A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
Future Internet
centralised
decentralised
identity
authentication
blockchain
scalability
title A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
title_full A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
title_fullStr A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
title_full_unstemmed A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
title_short A Comparative Survey of Centralised and Decentralised Identity Management Systems: Analysing Scalability, Security, and Feasibility
title_sort comparative survey of centralised and decentralised identity management systems analysing scalability security and feasibility
topic centralised
decentralised
identity
authentication
blockchain
scalability
url https://www.mdpi.com/1999-5903/17/1/1
work_keys_str_mv AT aviralgoel acomparativesurveyofcentralisedanddecentralisedidentitymanagementsystemsanalysingscalabilitysecurityandfeasibility
AT yogachandranrahulamathavan acomparativesurveyofcentralisedanddecentralisedidentitymanagementsystemsanalysingscalabilitysecurityandfeasibility
AT aviralgoel comparativesurveyofcentralisedanddecentralisedidentitymanagementsystemsanalysingscalabilitysecurityandfeasibility
AT yogachandranrahulamathavan comparativesurveyofcentralisedanddecentralisedidentitymanagementsystemsanalysingscalabilitysecurityandfeasibility