ReCRED aims to build an integrated next generation access control (AC) solution that:
• solves the following problems that stem from the weaknesses of the current authentication methods, namely: password overload, referring to the inability of users to remember different secure passwords for each one of their accounts; identity fragmentation, stemming from the fact that independent identity providers (email, social networks, etc.) create disjoint identity realms, making it difficult for end users to prove joint ownership of accounts, e.g., for reputation transfer or to fend off impersonation attacks; lack of real-world identity binding to an individual’s legal presence, e.g., id number, passport, etc.; and lack of support for attribute-based access control (ABAC), which facilitates account-less access through verified identity attributes (e.g., age or location).
• is aligned with current technological trends and capabilities,
• offers a unifying access control framework that is suitable for a multitude of use cases that involve online and physical authentication and authorization via an off-the-shelf mobile device, and
• is attainable and feasible to implement in the existing products under the scope and timeframe of the project.