EXUS as Partner
From Real-world Identities to Privacy-Preserving and Attribute-Based Credentials for Device-Centric Access Control
The main idea behind ReCRED is to design and implement mechanisms that anchor all access control (AC) needs to mobile devices that users habitually use and carry.
ReCRED aims to build an integrated next generation access control (AC) solution that:
• solves the following problems that stem from the weaknesses of the current authentication methods, namely: password overload, referring to the inability of users to remember different secure passwords for each one of their accounts; identity fragmentation, stemming from the fact that independent identity providers (email, social networks, etc.) create disjoint identity realms, making it difficult for end users to prove joint ownership of accounts, e.g., for reputation transfer or to fend off impersonation attacks; lack of real-world identity binding to an individual’s legal presence, e.g., id number, passport, etc.; and lack of support for attribute-based access control (ABAC), which facilitates account-less access through verified identity attributes (e.g., age or location).
• is aligned with current technological trends and capabilities,
• offers a unifying access control framework that is suitable for a multitude of use cases that involve online and physical authentication and authorization via an off-the-shelf mobile device, and
• is attainable and feasible to implement in the existing products under the scope and timeframe of the project.
05/2015 - 04/2018
ReCRED will help in generating a tangible impact on the market since it will focus on demonstrating the viability of Device Centric Authentication as an aggregator for both account-based as well as attribute-based access control with associated very well specified business and exploitation plans. Such solutions, after demonstration and validation in real life environments directly involving end users, will be able to find a wide take up in the market since they will provide a competitive advantage in the market for all industrial and non-industrial players participating in ReCRED as detailed next.
TELEFONICA INVESTIGACION Y DESARROLLO SA (Spain)
VERIZON NEDERLAND BV (Netherlands)
CERTSIGN SA (Romania)
WEDIA LIMITED (Greece)
EXUS SOFTWARE LTD (United Kingdom)
UPCOM BVBA (Belgium)
DE PRODUCTIZERS BV (Netherlands)
TECHNOLOGIKO PANEPISTIMIO KYPROU (Cyprus)
UNIVERSIDAD CARLOS III DE MADRID (Spain)
CONSORZIO NAZIONALE INTERUNIVERSITARIO PER LE TELECOMUNICAZIONI (Italy)
STUDIO PROFESSIONALE ASSOCIATO A BAKER & MCKENZIE (Italy)
UNIVERSITY OF PIRAEUS RESEARCH CENTER (Greece)