cid 92896cb75583768ccf638b793fb2df201f3b6106ed8b6eb63e25780af319be2a · original · via openalex
Title: Lightweight SPIFFE Verifiable Identity Document (LSVID): A Nested Token Approach for Enhanced Security and Flexibility in SPIFFE Authors: Henrique Zanela Cochak; Charles C. Miers; Pedro H. Barcha Correia; Marco Antonio Marques; Marcos Antonio Simplicio Junior Venue: IEEE International Conference on Cloud Computing Technology and Science Year: 2024 Canonical: doi:10.1109/cloudcom62794.2024.00015 URL: https://doi.org/10.1109/cloudcom62794.2024.00015 Collector: openalex OA: false ABSTRACT Service identities are crucial for authentication and access control, ensuring that only authorized services access specific resources. The SPIFFE framework addresses workload identity management and authentication effectively but needs support for solutions (e.g., extensible tokens) that fine-granular authorization mechanisms in distributed scenarios can use. In this context, we present the Lightweight SVID (LSVID), an identity document in JSON format that can be extended and used as a token. As an extensible token, Lightweight SVID (LSVID) enables features such as delegation, attenuation, and traceability, enhancing its flexibility and applicability. Our approach provides efficient handling of token extensions and validations, demonstrated through a proof-of-concept implemented in Go. Baseline results indicate that LSVID critical operations are efficient, with processing times in the microsecond range, offering significant functional advantages over the traditional JWT-SVIDs, one of two key security documents from SPIFFE.