Cyber Attack Defense: DID-based Email Security System

Abstract

As interest in personal information protection and self-sovereign identity authentication increases, research into the integration potential of blockchain and DID technologies across various industries is growing. Although current email systems continue to be upgraded, their core technology is over 30 years old. These systems, focused more on communication rather than security, lack robust protocols to counter various modern cyberattacks. Addressing these vulnerabilities, this paper researches enhancing digital communication security and focuses on security using DID. The proposed DID-based system, compared to traditional PGP and S/MIME methods, manages identity information more securely and efficiently without relying on centralized authentication authorities. It's designed to ensure the integrity of emails, verify sender identity, and effectively resist spear-phishing and various cyberattacks, as explained through security and theoretical analyses in this DID-based system proposal.