Abstract
Electronic Identity (eID) is a solution toward solving the identity problem when deploying e-Government. Such solution should not only be secure, but also have to be robust enough under adversarial conditions. In Denmark, NemID is a digital eID used to log into public websites, for online banking and many digital services. However, it suffers from some security threats such as Distributed Denial of Service (DDoS) attack. In 2013, a tremendous DDoS attack over NemID caused chaos in Danish society, people found themselves out-of-reach to many services. Focused on this threat, we develop FolketID, a blockchain-based NemID alternative against DDoS attacks. The DDoS mitigation is achieved by not only utilizing its powerful data distribution ability, but also exploiting the economy system in blockchain. It particularly takes use of the transaction fees to effectively prevent DDoS attacks. In the evaluation, our experimental results demonstrate the viability and effectiveness of FolketID in defeating DDoS attacks.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Silcock, R.: What is e-Government. Parliam. Aff. 54(1), 88–101 (2001)
Arora, S.: National e-ID card schemes: a European overview. Inf. Secur. Tech. Rep. 13, 46–53 (2008)
National IDs Around the World – Interactive map | World Privacy Forum. https://www.worldprivacyforum.org/2021/10/national-ids-and-biometrics/
Gronlund, A.: Electronic identity management in Sweden: governance of a market approach. Identity Inf. Soc. 3, 195–211 (2010). https://doi.org/10.1007/s12394-010-0043-1
Rissanen, T.: Electronic identity in Finland: ID cards vs. bank IDs. Identity Inf. Soc. 3, 175–194 (2010). https://doi.org/10.1007/s12394-010-0049-8
National Identity and Signing. https://en.digst.dk/digitisation/eid
NemID. https://lifeindenmark.borger.dk/apps-and-digital-services/nemid. Accessed 1 Apr 2022
The future market for cybersecurity in Denmark. https://innovationsfonden.dk/sites/default/files/2018-07/thefuturemarketforcybersecurityindenmark.pdf. Accessed 15 Apr 2022)
UPDATE: NemID system running again following attack. https://wikimili.com/en/NemID. Accessed 1 May 2022
MitID: A stronger and safer digital Denmark. https://penneo.com/blog/nemid-to-mitid/. Accessed 18 Apr 2022
DDoS attack on NemID costs 4 months probation. https://www.version2.dk/artikel/ddos-angreb-mod-nemid-koster-4-maaneders-betinget-faengsel. Accessed 1 May 2022
Chiu, W.Y., Meng, W., Jensen, C.D.: My data, my control: a secure data sharing and access scheme over blockchain. J. Inf. Secur. Appl. 63, 103020 (2021)
Chiu, W.Y., Meng, W.: EdgeTC - A PBFT blockchain-based ETC scheme for smart cities. Peer-to-Peer Netw. Appl. 14, 2874–2886 (2021). https://doi.org/10.1007/s12083-021-01119-0
Chiu, W.Y., Meng, W.: Towards decentralized bicycle insurance system based on blockchain. The 36th ACM/SIGAPP Symposium on Applied Computing (ACM SAC), pp. 249–256 (2021)
Chiu, W.-Y., Meng, W., Jensen, C.D.: NoPKI - a point-to-point trusted third party service based on blockchain consensus algorithm. In: Xu, G., Liang, K., Su, C. (eds.) FCS 2020. CCIS, vol. 1286, pp. 197–214. Springer, Singapore (2020). https://doi.org/10.1007/978-981-15-9739-8_16
IPFS Powers the Distributed Web. https://ipfs.io/
Meng, W., Li, W., Zhou, J.: Enhancing the security of blockchain-based software defined networking through trust-based traffic fusion and filtration. Inf. Fusion 70, 60–71 (2021)
Houda, Z.A.E., Hafid, A., Khoukhi, L.: Co-IoT: a Collaborative DDoS Mitigation Scheme in IoT environment based on blockchain using SDN. In: Proceedings of GLOBECOM, pp. 1–6 (2019)
Rodrigues, B., Stiller, B.: The cooperative DDoS signaling based on a blockchain-based system. In: Proceedings of IM, pp. 760–765 (2021)
Guo, W., Xu, J., Pei, Y., Yin, L., Jiang, C.: LDBT: a lightweight DDoS attack tracing scheme based on blockchain. In: Proceedings of ICC Workshops, pp. 1–6 (2021)
Shah, Z., Ullah, I., Li, H., Levula, A., Khurshid, K.: Blockchain based solutions to mitigate distributed denial of service (DDoS) attacks in the internet of things (IoT): a survey. Sensors 22(3), 1094 (2022)
Teknologien Bag NemID. https://digst.dk/it-loesninger/nemid/om-loesningen/teknik/. Accessed 1 Apr 2022
Sikkerheden Bag NemID. https://digst.dk/it-loesninger/nemid/om-loesningen/sikkerheden-bag-nemid/. Accessed 2 Apr 2022
Wani, S., Imthiyas, M., Almohamedh, H., Alhamed, K., Almotairi, S., Gulzar, Y.: Distributed denial of service (DDoS) mitigation using blockchain - a comprehensive insight. Symmetry 13(2), 227 (2021)
Singh, K., Choube, S.: Using blockchain against cyber attacks on smart grids. In: Proceedings of SCEECS, pp. 1–8 (2018)
Javaid, U., Siang, A., Aman, M., Sikdar, B.: Mitigating IoT device based DDoS attacks using blockchain Cry’Block 2018. In: Proceedings of Cryptocurrencies and Blockchains for Distributed Systems, pp. 71–76 (2018)
Peers - Hyperledger-Fabricdosc Mater Documentation. https://hyperledger-fabric.readthedocs.io/en/release-2.2/peers/peers.html. Accessed 22 Apr 2022
Andola, N., Manas Gogoi, R., Venkatesan, S., Verman, S.: Vulnerabilities on hyperledger fabric. Pervasive Mob. Comput. 59 (2019)
Acknowledgments
This work was partially supported by H2020 CyberSec4Europe and H2020 DataVaults.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Chiu, WY., Meng, W., Li, W., Fang, L. (2022). FolketID: A Decentralized Blockchain-Based NemID Alternative Against DDoS Attacks. In: Ge, C., Guo, F. (eds) Provable and Practical Security. ProvSec 2022. Lecture Notes in Computer Science, vol 13600. Springer, Cham. https://doi.org/10.1007/978-3-031-20917-8_15
Download citation
DOI: https://doi.org/10.1007/978-3-031-20917-8_15
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-20916-1
Online ISBN: 978-3-031-20917-8
eBook Packages: Computer ScienceComputer Science (R0)