IdentityBrIDge

The IdentityBrIDge project aims to enable the smooth collaboration of multiple identity ecosystems, the trusted transfer of identity information, and mutual accounting of exchanged information.

Factsheet

  • Lead school School of Engineering and Computer Science
  • Institute(s) Institute for Data Applications and Security (IDAS)
  • Research unit(s) IDAS / Identity and Access Management (IAM)
  • Strategic thematic field Thematic field "Humane Digital Transformation"
  • Funding organisation Others
  • Duration 01.11.2022 - 31.07.2023
  • Project management Prof. Dr. Annett Laube
  • Head of project Prof. Dr. Annett Laube
  • Project staff Maël Gassmann
  • Partner PostFinance AG
    SBB
  • Keywords B2B, identities, data minimization, privacy

Situation

Business processes between two and more companies, so-called Business-To-Business (B2B) relationships, are mostly handled electronically today. But if you look closely, you will still find many manual steps that often generate high indirect costs. The cause is usually a lack of information about employees of one company, which is needed to efficiently manage the business processes of the other. But how can this exchange be handled efficiently and without media discontinuity?

Course of action

IdentityBrIDge wants to develop a generic solution that, based on contracts (business relationships), can transfer identity information from one company to a second simply, automatically and without media discontinuity. With the information, which can include identification information, information about communication channels (such as e-mail, telephone), billing information and authorizations, the business processes are parameterized and thus customized. Ideally, these individual parameters only have to be stored temporarily - during the execution of the process - and can be destroyed afterwards (data economy). The solution of IdentityBrIDge should guarantee information security as well as traceability, non-repudiation and auditability in the regulation-compliant handling of business processes. Thereby the protection of data and privacy of the involved persons will be ensured industry and process specific.

Looking ahead

The planned prototype, which will be developed on the basis of the new standard jointly defined by BFH, PostFinance and SBB, will be made available to all interested parties as an open source project.

This project contributes to the following SDGs

  • 9: Industry, innovation and infrastructure
  • 17: Partnerships for the goals