SSOme: Securing Advanced Single Sign-On in a Modern Ecosystem

在社交网络的推动下，单点登录（SSO）在网络上变得非常流行。使用SSO方案，用户可以方便地在许多网站上登录，只需在他们的电子邮件提供商或最喜欢的社交网络上登录，例如，通过“使用Facebook登录”或“使用Google登录”。他们还可以授权第三方访问他们的帐户，例如，允许这些方将内容发布到他们的Facebook时间轴。这些单点登录方案通常基于联邦认证和授权协议，如OAuth 2.0和OpenID Connect。在我们以前的研究中，我们已经开发了一个丰富的Web基础设施模型，并成功地将其应用于分析基于Web的单点登录方案。我们的分析揭示了一些针对广泛使用的标准的新攻击，例如OAuth 2.0和OpenID Connect。我们还提出了一些修复措施，这些措施在我们的模型中被证明是安全的，并导致了标准的改进。目前，SSO系统的应用前景正在迅速变化和扩展。SSO系统现在发现越来越多的应用程序在纯Web环境之外以及高风险和高风险环境中。例如，银行已开始采用单点登录技术，使其服务可在线提供，并通过互联网将其相互连接。自2019年9月以来，欧盟的银行在法律上有义务向第三方服务开放其系统，例如支付处理器，这些服务可以代表用户查看或调用交易。SSO系统和标准现在也用于物联网设备，例如门锁和汽车，其中，例如，用户可以授权其他用户，例如朋友或交付服务，以打开他们的前门或汽车。此外，基于SSO的系统正在构建中，用于医生向患者开具数字处方或与保险公司建立具有法律约束力的合同，用户向银行进行身份验证以生成数字签名，这些新用例引发了新标准、协议和系统的开发。一些新应用程序的高风险性质，处理的敏感信息，以及这些协议和SSO系统应该发挥作用的新环境，使得以前的正式安全和隐私分析方法不足。其中，需要更强、更新的安全和隐私属性，以及更适合、更现实的攻击者模型，为新的、先进的单点登录系统和标准的形式化分析提供合适的模型和方法，对相关的新兴标准和应用进行分析，因此，为新的高风险和敏感的生态系统设计安全的SSO系统是本项目的主要目标。

Driven by social networks, single sign-on (SSO) has become extremely popular on the web. Using SSO schemes, users can conveniently sign in at many web sites by just signing in at their email provider or favorite social network, for example, via "Login with Facebook" or "Login with Google". They can also grant third parties access to their accounts, allowing these parties, for example, to post content to their Facebook timeline. These SSO schemes are typically based on federated authentication and authorization protocols, such as OAuth 2.0 and OpenID Connect.In our previous research, we have developed a rich model of the web infrastructure and successfully applied it to analyze web-based SSO schemes. Our analysis has revealed several new attacks on widely used standards, such as OAuth 2.0 and OpenID Connect. We also suggested fixes, which we proved secure in our model and which have led to improvements of the standards.Currently, the landscape of applications of SSO systems is, however, changing and expanding rapidly. SSO systems now find more and more applications outside of the pure web context as well as in high-risk and high-stake environments. For example, banks have started to employ SSO technologies to make their services available online and to interconnect them over the Internet. Since September 2019, banks in the EU are legally obliged to open their systems to third-party services, such as payment processors, that may view or invoke transactions on the users' behalf. SSO systems and standards are now also employed for IoT devices, such as door locks and cars, where, for example, users can authorize other users, such as friends or delivery services, to open their front doors or cars. Moreover, SSO-based systems are being built for physicians to issue digital prescriptions to patients or for establishing legally binding contracts, for example, with insurance companies, with users authenticating to their banks in order to generate digital signatures.Such new use cases have sparked the development of new standards, protocols, and systems. The high-risk nature of some of the new applications, the sensible information processed, and the new contexts in which these protocols and SSO systems are supposed to function, render previous approaches for the formal security and privacy analysis insufficient. Among others, stronger and new security and privacy properties as well as new and more suitable and realistic attacker models are required.Providing appropriate models and methods for the formal analysis of the new and advanced SSO systems and standards, carrying out such an analysis on relevant emerging standards and applications, and designing secure SSO systems for the new high-risk and sensitive ecosystems are therefore the main goals of this project.