Architectural Insights into TRUSTEE's Authentication Manager: Leveraging SSI and eIDAS

In today's digital realm, secure and effective user authentication mechanisms are of paramount importance. This paper delves into the intricate architecture of the Authentication Manager (AM), specifically designed to harness the power of self-sovereign identity (SSI) using blockchain technology for the TRUSTEE system. Central to the AM's design is the innovative integration of SSI for user authentication, bridging seamlessly with the eIDAS network, a trusted source for retrieving comprehensive user identity information. By leveraging the eIDAS regulatory framework, the AM can efficiently issue and retrieve user data, translating this information into verifiable credentials that are stored and managed in an individual's wallet. Adding another layer of versatility to this system, we have broadened the AM component to support GAIA-X users in conjunction with T4.4. These users, possessing their own unique GAIA-X credentials, can now be directly integrated into TRUSTEE. As part of this integration, the paper examines the potential of wallet.id technology as a suitable platform. Interestingly, this extension serves as a foundational model for the inclusion of diverse user types in the future. The paper commences with an in-depth overview of authentication mechanics, user authorization processes, the SSI paradigm, and a glance at state-of-the-art methods. Subsequently, we navigate the reader through the high-level architectural design of the AM, culminating in a detailed exploration of its specific architecture, offering valuable insights for researchers and practitioners alike.