{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:L5OV4D2YWEDOM5AL35O4V4KAFH","short_pith_number":"pith:L5OV4D2Y","canonical_record":{"source":{"id":"2506.01325","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:11:01Z","cross_cats_sorted":[],"title_canon_sha256":"99c50a23e640e4670470840c2d73df5944851649a5f277878787a5d1ef29626e","abstract_canon_sha256":"4324df728c6dc3d1f4ce51b7868f7e48377940bdb505f9a55a71e0afe8f9fdd3"},"schema_version":"1.0"},"canonical_sha256":"5f5d5e0f58b106e6740bdf5dcaf14029db8aa84438182d4d95278e6f5a0ffb2a","source":{"kind":"arxiv","id":"2506.01325","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01325","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01325v2","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01325","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_12","alias_value":"L5OV4D2YWEDO","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"L5OV4D2YWEDOM5AL","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"L5OV4D2Y","created_at":"2026-07-05T11:30:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:L5OV4D2YWEDOM5AL35O4V4KAFH","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01325","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:11:01Z","cross_cats_sorted":[],"title_canon_sha256":"99c50a23e640e4670470840c2d73df5944851649a5f277878787a5d1ef29626e","abstract_canon_sha256":"4324df728c6dc3d1f4ce51b7868f7e48377940bdb505f9a55a71e0afe8f9fdd3"},"schema_version":"1.0"},"canonical_sha256":"5f5d5e0f58b106e6740bdf5dcaf14029db8aa84438182d4d95278e6f5a0ffb2a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:30:01.354424Z","signature_b64":"GhhUrhR2TVdA68FZW4dM6jXHjLiYeT5+0nuQ6/1KNqbMpxBm5gdPIgF1zxcOSkzIE/nniVW22FIGFGnlpk+2Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5f5d5e0f58b106e6740bdf5dcaf14029db8aa84438182d4d95278e6f5a0ffb2a","last_reissued_at":"2026-07-05T11:30:01.353906Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:30:01.353906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01325","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:30:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cFG7MHhP8mE10QxDZuXVg3+2vm+x7J68yyWErnPDxviVXanZnKGbaZW4QOT7A1N+Z9Q00L9eYL9wMhkSAHtaBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:07:27.522047Z"},"content_sha256":"c8122b104a0bfda7a6dee7ff1737699871393392adff35d8c9cea976a19b58f3","schema_version":"1.0","event_id":"sha256:c8122b104a0bfda7a6dee7ff1737699871393392adff35d8c9cea976a19b58f3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:L5OV4D2YWEDOM5AL35O4V4KAFH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding the Identity-Transformation Approach in OIDC-Compatible Privacy-Preserving SSO Services","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Baitao Zhang, Huiyang He, Jingqiang Lin, Jiwu Jing, Quanwei Cai, Wei Wang","submitted_at":"2025-06-02T05:11:01Z","abstract_excerpt":"OpenID Connect (OIDC) enables a user with commercial-off-the-shelf browsers to log into multiple websites, called relying parties (RPs), by her username and credential set up in another trusted web system, called the identity provider (IdP). Identity transformations are proposed in UppreSSO to provide OIDC-compatible SSO services, preventing both IdP-based login tracing and RP-based identity linkage. While security and privacy of SSO services in UppreSSO have been proved, several essential issues of this identity-transformation approach are not well studied. In this paper, we comprehensively i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01325","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01325/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:30:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/9ymBQ3GciJi/zrRzDUBlCmdgVAy+3aXU6kDA352qMrvEHZnANQkYLKCM/yxz0KSLhKIeRFx0Y7qdcj9gExzAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:07:27.522655Z"},"content_sha256":"9759ef5a42c0c08e17be8aabccb9207751963a1f0b3d84ad0b2bbc09a424851c","schema_version":"1.0","event_id":"sha256:9759ef5a42c0c08e17be8aabccb9207751963a1f0b3d84ad0b2bbc09a424851c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/bundle.json","state_url":"https://pith.science/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T12:07:27Z","links":{"resolver":"https://pith.science/pith/L5OV4D2YWEDOM5AL35O4V4KAFH","bundle":"https://pith.science/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/bundle.json","state":"https://pith.science/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L5OV4D2YWEDOM5AL35O4V4KAFH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:L5OV4D2YWEDOM5AL35O4V4KAFH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4324df728c6dc3d1f4ce51b7868f7e48377940bdb505f9a55a71e0afe8f9fdd3","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:11:01Z","title_canon_sha256":"99c50a23e640e4670470840c2d73df5944851649a5f277878787a5d1ef29626e"},"schema_version":"1.0","source":{"id":"2506.01325","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01325","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01325v2","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01325","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_12","alias_value":"L5OV4D2YWEDO","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"L5OV4D2YWEDOM5AL","created_at":"2026-07-05T11:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"L5OV4D2Y","created_at":"2026-07-05T11:30:01Z"}],"graph_snapshots":[{"event_id":"sha256:9759ef5a42c0c08e17be8aabccb9207751963a1f0b3d84ad0b2bbc09a424851c","target":"graph","created_at":"2026-07-05T11:30:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01325/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"OpenID Connect (OIDC) enables a user with commercial-off-the-shelf browsers to log into multiple websites, called relying parties (RPs), by her username and credential set up in another trusted web system, called the identity provider (IdP). Identity transformations are proposed in UppreSSO to provide OIDC-compatible SSO services, preventing both IdP-based login tracing and RP-based identity linkage. While security and privacy of SSO services in UppreSSO have been proved, several essential issues of this identity-transformation approach are not well studied. In this paper, we comprehensively i","authors_text":"Baitao Zhang, Huiyang He, Jingqiang Lin, Jiwu Jing, Quanwei Cai, Wei Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:11:01Z","title":"Understanding the Identity-Transformation Approach in OIDC-Compatible Privacy-Preserving SSO Services"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01325","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c8122b104a0bfda7a6dee7ff1737699871393392adff35d8c9cea976a19b58f3","target":"record","created_at":"2026-07-05T11:30:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4324df728c6dc3d1f4ce51b7868f7e48377940bdb505f9a55a71e0afe8f9fdd3","cross_cats_sorted":[],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:11:01Z","title_canon_sha256":"99c50a23e640e4670470840c2d73df5944851649a5f277878787a5d1ef29626e"},"schema_version":"1.0","source":{"id":"2506.01325","kind":"arxiv","version":2}},"canonical_sha256":"5f5d5e0f58b106e6740bdf5dcaf14029db8aa84438182d4d95278e6f5a0ffb2a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5f5d5e0f58b106e6740bdf5dcaf14029db8aa84438182d4d95278e6f5a0ffb2a","first_computed_at":"2026-07-05T11:30:01.353906Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:30:01.353906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GhhUrhR2TVdA68FZW4dM6jXHjLiYeT5+0nuQ6/1KNqbMpxBm5gdPIgF1zxcOSkzIE/nniVW22FIGFGnlpk+2Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:30:01.354424Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01325","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c8122b104a0bfda7a6dee7ff1737699871393392adff35d8c9cea976a19b58f3","sha256:9759ef5a42c0c08e17be8aabccb9207751963a1f0b3d84ad0b2bbc09a424851c"],"state_sha256":"1713f61427103daa375913c6fdfd58f389fc5120fa2fab77ba13855d8ac28eb6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/fOV37LmL8EMrkt4SeCyAhWfykX+o10wxvekIMsCB+B7tQ/8XJWi8f8GYlyhseJReNS/DteMLhSsaCLNofbvBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T12:07:27.528553Z","bundle_sha256":"fcfe666e626097a5a939d3b256a04199ffdfd37decd204c272ee922e2572028e"}}