{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T21:28:52Z","timestamp":1780608532479,"version":"3.54.1"},"reference-count":21,"publisher":"Walter de Gruyter GmbH","issue":"1-2","funder":[{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["KU 1434\/10-1"],"award-info":[{"award-number":["KU 1434\/10-1"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["KU 1434\/10-2"],"award-info":[{"award-number":["KU 1434\/10-2"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,4,26]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>Single sign-on (SSO) systems, such as OpenID and OAuth, allow Web sites to delegate user authentication to third parties, such as Facebook or Google. These systems provide a convenient mechanism for users to log in and ease the burden of user authentication for Web sites. Conversely, by integrating such SSO systems, they become a crucial part of the security of the modern Web.<\/jats:p>\n               <jats:p>So far, it has been hard to prove if Web standards and protocols actually meet their security goals. SSO systems, in particular, need to satisfy strong security and privacy properties. In this thesis, we develop a new systematic approach to rigorously and formally analyze and verify such strong properties with the Web Infrastructure Model (WIM), the most comprehensive model of the Web infrastructure to date.<\/jats:p>\n               <jats:p>Our analyses reveal severe vulnerabilities in SSO systems that lead to critical attacks against their security and privacy. We propose fixes and formally verify that our proposals are sufficient to establish security. Our analyses, however, also show that even Mozilla\u2019s proposal for a privacy-preserving SSO system does not meet its unique privacy goal. To fill this gap, we use our novel approach to develop a new SSO system, SPRESSO, and formally prove that our system indeed enjoys strong security and privacy properties.<\/jats:p>","DOI":"10.1515\/itit-2022-0003","type":"journal-article","created":{"date-parts":[[2022,2,20]],"date-time":"2022-02-20T01:45:27Z","timestamp":1645321527000},"page":"43-48","source":"Crossref","is-referenced-by-count":2,"title":["Privacy-preserving Web single sign-on: Formal security analysis and design"],"prefix":"10.1515","volume":"64","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3776-5475","authenticated-orcid":false,"given":"Guido","family":"Schmitz","sequence":"first","affiliation":[{"name":"3162 Royal Holloway University of London , Information Security Group , Egham , Surrey , United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"374","published-online":{"date-parts":[[2022,2,19]]},"reference":[{"key":"2023033120315199689_j_itit-2022-0003_ref_001","unstructured":"Ben Adida et\u2009al. BrowserID Specification. Specifications for Mozilla\u2019s Identity Effort. https:\/\/github.com\/mozilla\/id-specs."},{"key":"2023033120315199689_j_itit-2022-0003_ref_002","doi-asserted-by":"crossref","unstructured":"Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf K\u00fcsters, Guido Schmitz, and Tim W\u00fcrtele. A Tutorial-Style Introduction to DY*. In Protocols, Logic, and Strands: Essays Dedicated to Joshua Guttman on the Occasion of His 66.66 Birthday, volume 13066 of LNCS, pages 77\u201397. Springer, 2021.","DOI":"10.1007\/978-3-030-91631-2_4"},{"key":"2023033120315199689_j_itit-2022-0003_ref_003","doi-asserted-by":"crossref","unstructured":"Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf K\u00fcsters, Guido Schmitz, and Tim W\u00fcrtele. An In-Depth Symbolic Security Analysis of the ACME Standard. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security (CCS 2021), pages 2601\u20132617. ACM, 2021.","DOI":"10.1145\/3460120.3484588"},{"key":"2023033120315199689_j_itit-2022-0003_ref_004","doi-asserted-by":"crossref","unstructured":"Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf K\u00fcsters, Guido Schmitz, and Tim W\u00fcrtele. DY*: A Modular Symbolic Verification Framework for Executable Cryptographic Protocol Code. In 2021 IEEE European Symposium on Security and Privacy (EuroS&P 2021), pages 523\u2013542. IEEE Computer Society, 2021.","DOI":"10.1109\/EuroSP51992.2021.00042"},{"key":"2023033120315199689_j_itit-2022-0003_ref_005","unstructured":"Quoc Huy Do, Pedram Hosseyni, Ralf K\u00fcsters, Guido Schmitz, Nils Wenzler, and Tim W\u00fcrtele. A Formal Security Analysis of the W3C Web Payment APIs: Attacks and Verification. In 43rd IEEE Symposium on Security and Privacy (S&P 2022). IEEE Computer Society, 2022. To appear."},{"key":"2023033120315199689_j_itit-2022-0003_ref_006","doi-asserted-by":"crossref","unstructured":"Danny Dolev and Andrew C. Yao. On the Security of Public-Key Protocols. IEEE Transactions on Information Theory, 29(2):198\u2013208, 1983.","DOI":"10.1109\/TIT.1983.1056650"},{"key":"2023033120315199689_j_itit-2022-0003_ref_007","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Pedram Hosseyni, and Ralf K\u00fcsters. An Extensive Formal Security Analysis of the OpenID Financial-grade API. In 2019 IEEE Symposium on Security and Privacy (S&P 2019), volume 1, pages 1054\u20131072. IEEE Computer Society, 2019.","DOI":"10.1109\/SP.2019.00067"},{"key":"2023033120315199689_j_itit-2022-0003_ref_008","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Ralf K\u00fcsters, and Guido Schmitz. An Expressive Model for the Web Infrastructure: Definition and Application to the BrowserID SSO System. In 35th IEEE Symposium on Security and Privacy (S&P 2014), pages 673\u2013688. IEEE Computer Society, 2014.","DOI":"10.1109\/SP.2014.49"},{"key":"2023033120315199689_j_itit-2022-0003_ref_009","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Ralf K\u00fcsters, and Guido Schmitz. Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Web. In 20th European Symposium on Research in Computer Security (ESORICS 2015), Proceedings, Part I, pages 43\u201365. Springer, 2015.","DOI":"10.1007\/978-3-319-24174-6_3"},{"key":"2023033120315199689_j_itit-2022-0003_ref_010","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Ralf K\u00fcsters, and Guido Schmitz. SPRESSO: A Secure, Privacy-Respecting Single Sign-On System for the Web. In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security (CCS 2015), pages 1358\u20131369. ACM, 2015.","DOI":"10.1145\/2810103.2813726"},{"key":"2023033120315199689_j_itit-2022-0003_ref_011","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Ralf K\u00fcsters, and Guido Schmitz. A Comprehensive Formal Security Analysis of OAuth 2.0. In Proceedings of the 23rd ACM SIGSAC Conference on Computer and Communications Security (CCS 2016), pages 1204\u20131215. ACM, 2016.","DOI":"10.1145\/2976749.2978385"},{"key":"2023033120315199689_j_itit-2022-0003_ref_012","doi-asserted-by":"crossref","unstructured":"Daniel Fett, Ralf K\u00fcsters, and Guido Schmitz. The Web SSO Standard OpenID Connect: In-Depth Formal Security Analysis and Security Guidelines. In IEEE 30th Computer Security Foundations Symposium (CSF 2017), pages 189\u2013202. IEEE Computer Society, 2017.","DOI":"10.1109\/CSF.2017.20"},{"key":"2023033120315199689_j_itit-2022-0003_ref_013","unstructured":"Daniel Fett and Guido Schmitz. Pi and More \u2013 eine Veranstaltungsreihe rund um \u201ekleine Computer\u201c. In 46. Jahrestagung der Gesellschaft f\u00fcr Informatik (Informatik 2016), volume P-259 of LNI, pages 1195\u20131196. GI, 2016."},{"key":"2023033120315199689_j_itit-2022-0003_ref_014","unstructured":"Brad Fitzpatrick, David Recordon, et\u2009al. OpenID Authentication 2.0. http:\/\/openid.net\/specs\/openid-authentication-2_0.html."},{"key":"2023033120315199689_j_itit-2022-0003_ref_015","doi-asserted-by":"crossref","unstructured":"E. Hammer-Lahav (Ed.). The OAuth 1.0 Protocol. RFC 5849 (Informational), 4 2010.","DOI":"10.17487\/rfc5849"},{"key":"2023033120315199689_j_itit-2022-0003_ref_016","doi-asserted-by":"crossref","unstructured":"D. Hardt (Ed.). The OAuth 2.0 Authorization Framework. RFC 6749 (Proposed Standard), 10 2012.","DOI":"10.17487\/rfc6749"},{"key":"2023033120315199689_j_itit-2022-0003_ref_017","unstructured":"Open Web Application Security Project (OWASP). Password storage cheat sheet. https:\/\/www.owasp.org\/index.php\/Password_Storage_Cheat_Sheet."},{"key":"2023033120315199689_j_itit-2022-0003_ref_018","unstructured":"N. Sakimura, J. Bradley, M. Jones, B. de Medeiros, and C. Mortimore. OpenID Connect Core 1.0 incorporating errata set 1. http:\/\/openid.net\/specs\/openid-connect-core-1_0.html."},{"key":"2023033120315199689_j_itit-2022-0003_ref_019","unstructured":"SAML 2.0 Technical Overview. Committee Draft 02. http:\/\/docs.oasis-open.org\/security\/saml\/Post2.0\/sstc-saml-tech-overview-2.0-cd-02.html."},{"key":"2023033120315199689_j_itit-2022-0003_ref_020","unstructured":"Guido Schmitz. Privacy-Preserving Web Single Sign-On: Formal Security Analysis and Design. PhD thesis, University of Stuttgart, 2019."},{"key":"2023033120315199689_j_itit-2022-0003_ref_021","doi-asserted-by":"crossref","unstructured":"Nikhil Swamy, Catalin Hritcu, Chantal Keller, Aseem Rastogi, Antoine Delignat-Lavaud, Simon Forest, Karthikeyan Bhargavan, C\u00e9dric Fournet, Pierre-Yves Strub, Markulf Kohlweiss, Jean Karim Zinzindohoue, and Santiago Zanella B\u00e9guelin. Dependent types and multi-monadic effects in F*. In ACM Symposium on Principles of Programming Languages (POPL 2016), pages 256\u2013270, 2016.","DOI":"10.1145\/2914770.2837655"}],"container-title":["it - Information Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.degruyter.com\/document\/doi\/10.1515\/itit-2022-0003\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.degruyter.com\/document\/doi\/10.1515\/itit-2022-0003\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T09:59:44Z","timestamp":1680343184000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.degruyter.com\/document\/doi\/10.1515\/itit-2022-0003\/html"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,19]]},"references-count":21,"journal-issue":{"issue":"1-2","published-online":{"date-parts":[[2021,11,17]]},"published-print":{"date-parts":[[2022,4,26]]}},"alternative-id":["10.1515\/itit-2022-0003"],"URL":"https:\/\/doi.org\/10.1515\/itit-2022-0003","relation":{},"ISSN":["2196-7032","1611-2776"],"issn-type":[{"value":"2196-7032","type":"electronic"},{"value":"1611-2776","type":"print"}],"subject":[],"published":{"date-parts":[[2022,2,19]]}}}