DA3I: Dynamic and Adaptive Authentication and Authorization Infrastructure for Resilient and Sustainable Applications

Data spaces and data marketplaces are characterized by dynamic ever-changing availability of decentralized data sources, users, and accesses where data can be access, can be granted and revoked at any time, Data sources may become faulty or unavailable over time, and new data sources might be added. This dynamicity requires the creation of an Authentication and Authorization Infrastructure (AAI) designed for resilient and sustainable applications. It must offer great flexibility and adaptivity providing secure and dynamic authentication, authorization, and access control services. While user management policies provide the foundation for identity and access management (IAM) systems, a dynamic policy management process enables policy adaptability for dynamic IAM scenarios. This process utilizes key performance indicators to detect and refine policies, facilitating the sustainable adoption of Self-Sovereign Identity (SSI). Therefore, we have developed a dynamic and adaptive authentication and authorization infrastructure (DA3I), considering the requirements of service providers to manage dynamic target platforms, decentralized and federated data sources, users, and access points. DA3I enables robust authentication and authorization within a multi-domain resources environment offering a resilient, sustainable, secure and dynamic access control system. We have also highlighted the significance of this study for offering long-term stability and protection to the Belt and Road Initiative (BRI) initiative and elaborated the characteristics and challenges of applying dynamic and adaptive trust in federated systems. Moreover, we presented a broad range of applications of the proposed DA3I approach in various critical systems such as healthcare, transportation, energy and industrial control systems.