Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Andreas Abraham; Felix Hörandner; Olamide Omolola; Sebastian Ramacher

doi:10.1007/978-3-030-41579-2_18

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Andreas Abraham^*, Felix Hörandner, Olamide Omolola, Sebastian Ramacher

^*Corresponding author for this work

Institute of Applied Information Processing and Communications (7050)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

As centralized identity management solutions amass identity
data, they increasingly become attractive targets for cyber attacks,
which entail consequences for users that range from service disruptions
to exposure of sensitive user data. Self-sovereign identity (SSI) strives to
return the control over identity data to the users by building on decentralized
architectures. However, the adoption of SSI systems is currently
hampered by a lack of qualified identity data that satisfies the services'
requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediate
components (e.g., importers or SSI network nodes) learn the
users' sensitive attributes during the derivation of eID data.
In this work, we present a decentralized eID derivation concept that
preserves the users' privacy while maintaining the data's trustworthiness
without revealing the plain data to any component outside the users' control.
Our proposed system also enables users to selectively disclose only
relevant parts of the imported identity assertion according to the service's
requirements. We also implement and evaluate a proof-of-concept
to demonstrate the feasibility and performance of our concept.

Original language	English
Title of host publication	Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers
Editors	Jianying Zhou, Xiapu Luo, Qingni Shen, Zhen Xu
Publisher	Springer
Pages	307-323
Number of pages	17
Volume	11999
ISBN (Electronic)	978-3-030-41579-2
ISBN (Print)	978-3-030-41578-5
DOIs	https://doi.org/10.1007/978-3-030-41579-2_18
Publication status	Published - 18 Feb 2020
Event	21st International Conference on Information and Communications Security: ICICS 2019 - Peking, China Duration: 15 Dec 2019 → 17 Dec 2019 http://icics.cn

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11999 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	21st International Conference on Information and Communications Security
Abbreviated title	ICICS'19
Country/Territory	China
City	Peking
Period	15/12/19 → 17/12/19
Internet address	http://icics.cn

Keywords

Qualified Electronic Identities
Self-Sovereign Identity
Distributed Ledger
Identity Derivation
Distributed Trust
Privacy
Distributed ledger
Qualified electronic identity
Identity derivation
Distributed trust

ASJC Scopus subject areas

Theoretical Computer Science
Computer Science(all)

Access to Document

10.1007/978-3-030-41579-2_18

Cite this

Abraham, A., Hörandner, F., Omolola, O., & Ramacher, S. (2020). Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. In J. Zhou, X. Luo, Q. Shen, & Z. Xu (Eds.), Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers (Vol. 11999, pp. 307-323). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11999 LNCS). Springer. https://doi.org/10.1007/978-3-030-41579-2_18

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. / Abraham, Andreas; Hörandner, Felix; Omolola, Olamide et al.
Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. ed. / Jianying Zhou; Xiapu Luo; Qingni Shen; Zhen Xu. Vol. 11999 Springer, 2020. p. 307-323 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11999 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abraham, A, Hörandner, F, Omolola, O & Ramacher, S 2020, Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. in J Zhou, X Luo, Q Shen & Z Xu (eds), Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. vol. 11999, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11999 LNCS, Springer, pp. 307-323, 21st International Conference on Information and Communications Security, Peking, China, 15/12/19. https://doi.org/10.1007/978-3-030-41579-2_18

Abraham A, Hörandner F, Omolola O, Ramacher S. Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. In Zhou J, Luo X, Shen Q, Xu Z, editors, Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. Vol. 11999. Springer. 2020. p. 307-323. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-41579-2_18

Abraham, Andreas ; Hörandner, Felix ; Omolola, Olamide et al. / Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. editor / Jianying Zhou ; Xiapu Luo ; Qingni Shen ; Zhen Xu. Vol. 11999 Springer, 2020. pp. 307-323 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{0e0c6fd8b0674d598c8d6356efeff855,

title = "Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems",

abstract = "As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.",

keywords = "Qualified Electronic Identities, Self-Sovereign Identity, Distributed Ledger, Identity Derivation, Distributed Trust, Privacy, Distributed ledger, Qualified electronic identity, Identity derivation, Distributed trust",

author = "Andreas Abraham and Felix H{\"o}randner and Olamide Omolola and Sebastian Ramacher",

year = "2020",

month = feb,

day = "18",

doi = "10.1007/978-3-030-41579-2_18",

language = "English",

isbn = "978-3-030-41578-5",

volume = "11999",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "307--323",

editor = "Jianying Zhou and Xiapu Luo and Qingni Shen and Zhen Xu",

booktitle = "Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers",

note = "21st International Conference on Information and Communications Security : ICICS 2019, ICICS'19 ; Conference date: 15-12-2019 Through 17-12-2019",

url = "http://icics.cn",

}

TY - GEN

T1 - Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

AU - Abraham, Andreas

AU - Hörandner, Felix

AU - Omolola, Olamide

AU - Ramacher, Sebastian

PY - 2020/2/18

Y1 - 2020/2/18

N2 - As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.

AB - As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.

KW - Qualified Electronic Identities

KW - Self-Sovereign Identity

KW - Distributed Ledger

KW - Identity Derivation

KW - Distributed Trust

KW - Privacy

KW - Distributed ledger

KW - Qualified electronic identity

KW - Identity derivation

KW - Distributed trust

UR - http://www.scopus.com/inward/record.url?scp=85081174480&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-41579-2_18

DO - 10.1007/978-3-030-41579-2_18

M3 - Conference paper

SN - 978-3-030-41578-5

VL - 11999

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 307

EP - 323

BT - Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers

A2 - Zhou, Jianying

A2 - Luo, Xiapu

A2 - Shen, Qingni

A2 - Xu, Zhen

PB - Springer

T2 - 21st International Conference on Information and Communications Security

Y2 - 15 December 2019 through 17 December 2019

ER -

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

E-Government Innovationszentrum - EGIZ - E-Government innovation center (EGIZ)

Cite this

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Projects

E-Government Innovationszentrum - EGIZ - E-Government innovation center (EGIZ)

Cite this