# Fast IDentity Online with Anonymous Credentials (FIDO-AC)

**Authors:** Wei-Zhu Yeoh, Michal Kepkowski, Gunnar Heide, Dali Kaafar, Lucjan Hanzlik  
**arXiv:** [2305.16758](https://arxiv.org/abs/2305.16758)  
**Date:** 2023-05-26  
**Summary page:** https://www.summarizepaper.com/en/paper/2305.16758v3/

## Key points

- Web authentication is crucial for secure online interactions
- FIDO protocol revolutionizes authentication by eliminating the need for passwords
- Disconnect exists between authentication process and users' attributes
- Lack of integration methods for trusted attributes leads to arbitrary disclosure of user information
- Challenges arise in applications requiring attribute verification due to ad-hoc solutions and lack of user control over data
- Data breaches like the one at Singtel Optus emphasize the need for more secure and privacy-centric authentication approaches
- FIDO-AC framework introduced by researchers combines FIDO2 with digital identities securely and privately
- Prototype implementation of FIDO-AC system demonstrates effectiveness in enhancing security and user empowerment in online authentication processes

## Summary

In today's digital landscape, web authentication plays a crucial role in ensuring secure interactions online. The  has revolutionized the authentication process by allowing users to authenticate to online services seamlessly using common devices, without the need for passwords. This approach is based on robust  and , enhancing security and user experience. Despite the advancements in authentication technology, there remains a disconnect between the authentication process and users' attributes. The FIDO protocol lacks specific methods to integrate trusted attributes with the authentication process effectively, leading to arbitrary disclosure of user information to relying parties. This gap poses challenges for applications that require attribute verification, such as age or expiry date of driver's licenses, as they often resort to ad-hoc solutions that do not adhere to  or empower users to control their disclosed data. Recent incidents like the data breach at Singtel Optus highlight the critical importance of addressing these shortcomings in authentication systems. The leak of sensitive personal data, including passport numbers, underscores the urgency for more secure and privacy-centric approaches to authentication. In response to these challenges, a team of researchers led by Wei-Zhu Yeoh, Michal Kepkowski, Gunnar Heide, Dali Kaafar, and Lucjan Hanzlik introduces a groundbreaking framework known as FIDO-AC. This innovative framework combines the FIDO2 authentication process with users' digital identities in a non-shareable manner. By leveraging off-the-shelf FIDO tokens and electronic identity documents like ICAO biometric passports (ePassports), FIDO-AC demonstrates how users can authenticate securely while preserving their privacy and control over their identity attributes. The practicality of this approach is validated through a prototype implementation of the FIDO-AC system, showcasing its effectiveness in enhancing both security and user empowerment in online authentication processes. This research is set to be published at the 32nd USENIX Security Symposium (USENIX 2023), marking a significant advancement in securing digital identities and redefining how we authenticate online.