Siddu: Decentralized Authorization with Zero Trust

Abstract

Over the last few years, there has been a lot of research related to authorization using JWTs, PASETO, Biscuit, Macaroons, etc. There has also been researching on decentralized authorization and access control, including WAVE, It relies on a graph-based authorisation model to provide decentralised trust, and DeFIRED, which enables users to create and revoke resource assignment chains in a safe and transitive manner. However, these solutions have shortcomings when it comes to determining who we should trust. Siddu is a framework for authorization over a distributed environment with a zero-trust policy. Furthermore, the framework also allows delegates to conduct elections to choose a new set of issuers.