<p>As digital identity rapidly develops, self-sovereign identity (SSI) systems are receiving more attention. Verifiable credentials (VCs) constitute a critical component of SSI systems; yet, users encounter heightened security risks when employing VCs for selective disclosure. In traditional selective disclosure schemes, adversaries can track individuals for extended periods, and collecting different verifiable presentations (VPs) can lead to security issues. This paper proposes an innovative, privacy-preserving scheme that enhances security during the selective disclosure process. This scheme uses a threshold version of the Pointcheval-Sanders (PS) signature technique for decentralized issuance and selective disclosure. It also employs pseudo-identities to address security concerns related to long-term tracking. Users generate pseudo-identities based on disclosed attributes and timestamps. Each disclosure generates a different pseudo-identity, ensuring uniqueness and preventing long-term tracking. The efficacy of the scheme is ensured through a meticulous correctness analysis. The performance evaluation indicates that our scheme exhibits enhanced security and is more efficient in terms of computational and communication costs when compared to existing selective disclosure schemes.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A verifiable credential scheme for resisting long-term tracking in self-sovereign identity

  • Zisang Xu,
  • Zhenhao Huan,
  • Kuanching Li,
  • Wei liang

摘要

As digital identity rapidly develops, self-sovereign identity (SSI) systems are receiving more attention. Verifiable credentials (VCs) constitute a critical component of SSI systems; yet, users encounter heightened security risks when employing VCs for selective disclosure. In traditional selective disclosure schemes, adversaries can track individuals for extended periods, and collecting different verifiable presentations (VPs) can lead to security issues. This paper proposes an innovative, privacy-preserving scheme that enhances security during the selective disclosure process. This scheme uses a threshold version of the Pointcheval-Sanders (PS) signature technique for decentralized issuance and selective disclosure. It also employs pseudo-identities to address security concerns related to long-term tracking. Users generate pseudo-identities based on disclosed attributes and timestamps. Each disclosure generates a different pseudo-identity, ensuring uniqueness and preventing long-term tracking. The efficacy of the scheme is ensured through a meticulous correctness analysis. The performance evaluation indicates that our scheme exhibits enhanced security and is more efficient in terms of computational and communication costs when compared to existing selective disclosure schemes.