Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation

Andreas Abraham; Karl Koch; Stefan More; Sebastian Ramacher; Miha  Stopar

doi:10.1109/TrustCom53373.2021.00080

Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation

Andreas Abraham, Karl Koch, Stefan More, Sebastian Ramacher, Miha Stopar

Institute of Applied Information Processing and Communications (7050)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

Digital identities play a vital role in an increasingly digital world. These identities often rely on central authorities to issue and manage them. Central authorities have the drawback of being a central trusted party, representing a bottleneck and single point of failure with exclusive control of identity-related
data. Self-sovereign identity (SSI) tackles those problems by
utilizing distributed ledger technology and making users the
sovereign owners of their identity data. Nevertheless, SSI, as
recent technology, still lacks qualified identity data. This is
especially a problem since sensitive services like eGovernment
or banking services require identity data issued by a qualified
identity provider; thus, SSI-based identities cannot be used for
these services.
In this paper, we propose a concept for deriving identity data
from an existing identity system into an SSI in a fully privacypreserving
way by additionally supporting offline verification.
This way, we enable a chain of trust from the existing identity
system to the SSI system by introducing a novel trust model.
Our concept utilizes novel cryptographic primitives to support
efficient and privacy-preserving identity showing as well as revocation.
To underline the feasibility of our concept, we implement
a proof system and benchmark the related use cases.

Original language	English
Title of host publication	Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021
Editors	Liang Zhao, Neeraj Kumar, Robert C. Hsu, Deqing Zou
Publisher	IEEE Computer Soc.
Pages	506-513
Number of pages	8
ISBN (Electronic)	9781665416580
DOIs	https://doi.org/10.1109/TrustCom53373.2021.00080
Publication status	Published - 2021
Event	20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications: TrustCom 2021 - Shenyang, China Duration: 18 Aug 2021 → 20 Aug 2021 Conference number: 20 https://trustcom2021.sau.edu.cn/

Publication series

Name	Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021

Conference

Conference	20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications
Abbreviated title	TrustCom 2021
Country/Territory	China
City	Shenyang
Period	18/08/21 → 20/08/21
Internet address	https://trustcom2021.sau.edu.cn/

Keywords

Self-Sovereign Identity
eID derivation
offline revocation
zero-knowledge proofs
self-sovereign identity

ASJC Scopus subject areas

Information Systems and Management
Information Systems
Safety, Risk, Reliability and Quality
Computer Networks and Communications

Access to Document

10.1109/TrustCom53373.2021.00080

paper-ippeidFinal published version, 1.05 MBLicence: CC BY-NC 4.0

Cite this

Abraham, A., Koch, K., More, S., Ramacher, S., & Stopar, M. (2021). Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation. In L. Zhao, N. Kumar, R. C. Hsu, & D. Zou (Eds.), Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021 (pp. 506-513). (Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021). IEEE Computer Soc.. https://doi.org/10.1109/TrustCom53373.2021.00080

Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation. / Abraham, Andreas; Koch, Karl ; More, Stefan et al.
Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021. ed. / Liang Zhao; Neeraj Kumar; Robert C. Hsu; Deqing Zou. IEEE Computer Soc., 2021. p. 506-513 (Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021).

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abraham, A, Koch, K , More, S, Ramacher, S & Stopar, M 2021, Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation. in L Zhao, N Kumar, RC Hsu & D Zou (eds), Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021. Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021, IEEE Computer Soc., pp. 506-513, 20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Shenyang, China, 18/08/21. https://doi.org/10.1109/TrustCom53373.2021.00080

Abraham A, Koch K , More S, Ramacher S, Stopar M. Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation. In Zhao L, Kumar N, Hsu RC, Zou D, editors, Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021. IEEE Computer Soc. 2021. p. 506-513. (Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021). doi: 10.1109/TrustCom53373.2021.00080

Abraham, Andreas ; Koch, Karl ; More, Stefan et al. / Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation. Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021. editor / Liang Zhao ; Neeraj Kumar ; Robert C. Hsu ; Deqing Zou. IEEE Computer Soc., 2021. pp. 506-513 (Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021).

@inproceedings{159fb88a39ad40fc9ca97da8d41d0a26,

title = "Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation",

abstract = "Digital identities play a vital role in an increasingly digital world. These identities often rely on central authorities to issue and manage them. Central authorities have the drawback of being a central trusted party, representing a bottleneck and single point of failure with exclusive control of identity-relateddata. Self-sovereign identity (SSI) tackles those problems byutilizing distributed ledger technology and making users thesovereign owners of their identity data. Nevertheless, SSI, asrecent technology, still lacks qualified identity data. This isespecially a problem since sensitive services like eGovernmentor banking services require identity data issued by a qualifiedidentity provider; thus, SSI-based identities cannot be used forthese services.In this paper, we propose a concept for deriving identity datafrom an existing identity system into an SSI in a fully privacypreservingway by additionally supporting offline verification.This way, we enable a chain of trust from the existing identitysystem to the SSI system by introducing a novel trust model.Our concept utilizes novel cryptographic primitives to supportefficient and privacy-preserving identity showing as well as revocation.To underline the feasibility of our concept, we implementa proof system and benchmark the related use cases.",

keywords = "Self-Sovereign Identity, eID derivation, offline revocation, zero-knowledge proofs, self-sovereign identity",

author = "Andreas Abraham and Karl Koch and Stefan More and Sebastian Ramacher and Miha Stopar",

year = "2021",

doi = "10.1109/TrustCom53373.2021.00080",

language = "English",

series = "Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021",

publisher = "IEEE Computer Soc.",

pages = "506--513",

editor = "Liang Zhao and Neeraj Kumar and Hsu, {Robert C.} and Deqing Zou",

booktitle = "Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021",

note = "20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications : TrustCom 2021, TrustCom 2021 ; Conference date: 18-08-2021 Through 20-08-2021",

url = "https://trustcom2021.sau.edu.cn/",

}

TY - GEN

T1 - Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation

AU - Abraham, Andreas

AU - Koch, Karl

AU - More, Stefan

AU - Ramacher, Sebastian

AU - Stopar, Miha

N1 - Conference code: 20

PY - 2021

Y1 - 2021

N2 - Digital identities play a vital role in an increasingly digital world. These identities often rely on central authorities to issue and manage them. Central authorities have the drawback of being a central trusted party, representing a bottleneck and single point of failure with exclusive control of identity-relateddata. Self-sovereign identity (SSI) tackles those problems byutilizing distributed ledger technology and making users thesovereign owners of their identity data. Nevertheless, SSI, asrecent technology, still lacks qualified identity data. This isespecially a problem since sensitive services like eGovernmentor banking services require identity data issued by a qualifiedidentity provider; thus, SSI-based identities cannot be used forthese services.In this paper, we propose a concept for deriving identity datafrom an existing identity system into an SSI in a fully privacypreservingway by additionally supporting offline verification.This way, we enable a chain of trust from the existing identitysystem to the SSI system by introducing a novel trust model.Our concept utilizes novel cryptographic primitives to supportefficient and privacy-preserving identity showing as well as revocation.To underline the feasibility of our concept, we implementa proof system and benchmark the related use cases.

AB - Digital identities play a vital role in an increasingly digital world. These identities often rely on central authorities to issue and manage them. Central authorities have the drawback of being a central trusted party, representing a bottleneck and single point of failure with exclusive control of identity-relateddata. Self-sovereign identity (SSI) tackles those problems byutilizing distributed ledger technology and making users thesovereign owners of their identity data. Nevertheless, SSI, asrecent technology, still lacks qualified identity data. This isespecially a problem since sensitive services like eGovernmentor banking services require identity data issued by a qualifiedidentity provider; thus, SSI-based identities cannot be used forthese services.In this paper, we propose a concept for deriving identity datafrom an existing identity system into an SSI in a fully privacypreservingway by additionally supporting offline verification.This way, we enable a chain of trust from the existing identitysystem to the SSI system by introducing a novel trust model.Our concept utilizes novel cryptographic primitives to supportefficient and privacy-preserving identity showing as well as revocation.To underline the feasibility of our concept, we implementa proof system and benchmark the related use cases.

KW - Self-Sovereign Identity

KW - eID derivation

KW - offline revocation

KW - zero-knowledge proofs

KW - self-sovereign identity

UR - http://www.scopus.com/inward/record.url?scp=85127405402&partnerID=8YFLogxK

U2 - 10.1109/TrustCom53373.2021.00080

DO - 10.1109/TrustCom53373.2021.00080

M3 - Conference paper

T3 - Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021

SP - 506

EP - 513

BT - Proceedings - 2021 IEEE 20th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2021

A2 - Zhao, Liang

A2 - Kumar, Neeraj

A2 - Hsu, Robert C.

A2 - Zou, Deqing

PB - IEEE Computer Soc.

T2 - 20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications

Y2 - 18 August 2021 through 20 August 2021

ER -

Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

EU - KRAKEN - Brokerage and market platform for personal data

Cite this

Privacy-Preserving eID Derivation to Self-Sovereign Identity Systems with Offline Revocation

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Projects

EU - KRAKEN - Brokerage and market platform for personal data

Cite this