Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Andreas Abraham*, Felix Hörandner, Olamide Omolola, Sebastian Ramacher

*Korrespondierende/r Autor/-in für diese Arbeit

Publikation: Beitrag in Buch/Bericht/KonferenzbandBeitrag in einem KonferenzbandBegutachtung

Abstract

As centralized identity management solutions amass identity
data, they increasingly become attractive targets for cyber attacks,
which entail consequences for users that range from service disruptions
to exposure of sensitive user data. Self-sovereign identity (SSI) strives to
return the control over identity data to the users by building on decentralized
architectures. However, the adoption of SSI systems is currently
hampered by a lack of qualified identity data that satisfies the services'
requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediate
components (e.g., importers or SSI network nodes) learn the
users' sensitive attributes during the derivation of eID data.
In this work, we present a decentralized eID derivation concept that
preserves the users' privacy while maintaining the data's trustworthiness
without revealing the plain data to any component outside the users' control.
Our proposed system also enables users to selectively disclose only
relevant parts of the imported identity assertion according to the service's
requirements. We also implement and evaluate a proof-of-concept
to demonstrate the feasibility and performance of our concept.
Originalspracheenglisch
TitelInformation and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers
Redakteure/-innenJianying Zhou, Xiapu Luo, Qingni Shen, Zhen Xu
Herausgeber (Verlag)Springer
Seiten307-323
Seitenumfang17
Band11999
ISBN (elektronisch)978-3-030-41579-2
ISBN (Print)978-3-030-41578-5
DOIs
PublikationsstatusVeröffentlicht - 18 Feb. 2020
Veranstaltung21st International Conference on Information and Communications Security - Peking, Peking, China
Dauer: 15 Dez. 201917 Dez. 2019
http://icics.cn

Publikationsreihe

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Band11999 LNCS
ISSN (Print)0302-9743
ISSN (elektronisch)1611-3349

Konferenz

Konferenz21st International Conference on Information and Communications Security
KurztitelICICS'19
Land/GebietChina
OrtPeking
Zeitraum15/12/1917/12/19
Internetadresse

ASJC Scopus subject areas

  • Theoretische Informatik
  • Informatik (insg.)

Fingerprint

Untersuchen Sie die Forschungsthemen von „Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems“. Zusammen bilden sie einen einzigartigen Fingerprint.

Dieses zitieren