Distributed Attestation Revocation in Self-Sovereign Identity

Rowdy Chotkan; Jérémie Decouchant; Johan Pouwelse

doi:10.1109/LCN53696.2022.9843323

Distributed Attestation Revocation in Self-Sovereign Identity

Rowdy Chotkan, Jérémie Decouchant, Johan Pouwelse

Data-Intensive Systems

Research output: Chapter in Book/Conference proceedings/Edited volume › Conference contribution › Scientific › peer-review

3 Citations (Scopus)

24 Downloads (Pure)

Abstract

Self-Sovereign Identity (SSI) aspires to create a standardised identity layer for the Internet by placing citizens at the centre of their data, thereby weakening the grip of big tech on current digital identities. However, as millions of both physical and digital identities are lost annually, it is also necessary for SSIs to possibly be revoked to prevent misuse. Previous attempts at designing a revocation mechanism typically violate the principles of SSI by relying on central trusted components. This lack of a distributed revocation mechanism hampers the development of SSI. In this paper, we address this limitation and present the first fully distributed SSI revocation mechanism that does not rely on specialised trusted nodes. Our novel gossip-based propagation algorithm disseminates revocations throughout the network and provides nodes with a proof of revocation that enables offline verification of revocations. We demonstrate through simulations that our protocol adequately scales to national levels.

Original language	English
Title of host publication	Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022
Editors	Sharief Oteafy, Eyuphan Bulut, Florian Tschorsch
Publisher	IEEE
Pages	414-421
Number of pages	8
ISBN (Electronic)	978-1-6654-8001-7
ISBN (Print)	978-1-6654-8002-4
DOIs	https://doi.org/10.1109/LCN53696.2022.9843323
Publication status	Published - 2022
Event	2022 IEEE 47th Conference on Local Computer Networks (LCN) - Hybrid hosted in Edmonton, Canada Duration: 26 Sept 2022 → 29 Sept 2022 Conference number: 47th

Publication series

Name	Proceedings - Conference on Local Computer Networks, LCN

Conference

Conference	2022 IEEE 47th Conference on Local Computer Networks (LCN)
Country/Territory	Canada
City	Hybrid hosted in Edmonton
Period	26/09/22 → 29/09/22

Bibliographical note

Green Open Access added to TU Delft Institutional Repository 'You share, we take care!' - Taverne project https://www.openaccess.nl/en/you-share-we-take-care
Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

Keywords

Self-Sovereign Identity
revocation
offline verification

Access to Document

10.1109/LCN53696.2022.9843323

Distributed_Attestation_Revocation_in_Self-Sovereign_IdentityFinal published version, 1.11 MB

Cite this

Chotkan, R., Decouchant, J., & Pouwelse, J. (2022). Distributed Attestation Revocation in Self-Sovereign Identity. In S. Oteafy, E. Bulut, & F. Tschorsch (Eds.), Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022 (pp. 414-421). Article 9843323 (Proceedings - Conference on Local Computer Networks, LCN). IEEE. https://doi.org/10.1109/LCN53696.2022.9843323

@inproceedings{4ff09be8c9a2420682675d8fe920d4ae,

title = "Distributed Attestation Revocation in Self-Sovereign Identity",

abstract = "Self-Sovereign Identity (SSI) aspires to create a standardised identity layer for the Internet by placing citizens at the centre of their data, thereby weakening the grip of big tech on current digital identities. However, as millions of both physical and digital identities are lost annually, it is also necessary for SSIs to possibly be revoked to prevent misuse. Previous attempts at designing a revocation mechanism typically violate the principles of SSI by relying on central trusted components. This lack of a distributed revocation mechanism hampers the development of SSI. In this paper, we address this limitation and present the first fully distributed SSI revocation mechanism that does not rely on specialised trusted nodes. Our novel gossip-based propagation algorithm disseminates revocations throughout the network and provides nodes with a proof of revocation that enables offline verification of revocations. We demonstrate through simulations that our protocol adequately scales to national levels.",

keywords = "Self-Sovereign Identity, revocation, offline verification",

author = "Rowdy Chotkan and J{\'e}r{\'e}mie Decouchant and Johan Pouwelse",

note = "Green Open Access added to TU Delft Institutional Repository 'You share, we take care!' - Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.; 2022 IEEE 47th Conference on Local Computer Networks (LCN) ; Conference date: 26-09-2022 Through 29-09-2022",

year = "2022",

doi = "10.1109/LCN53696.2022.9843323",

language = "English",

isbn = "978-1-6654-8002-4",

series = "Proceedings - Conference on Local Computer Networks, LCN",

publisher = "IEEE",

pages = "414--421",

editor = "Sharief Oteafy and Eyuphan Bulut and Florian Tschorsch",

booktitle = "Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022",

address = "United States",

}

Chotkan, R , Decouchant, J & Pouwelse, J 2022, Distributed Attestation Revocation in Self-Sovereign Identity. in S Oteafy, E Bulut & F Tschorsch (eds), Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022., 9843323, Proceedings - Conference on Local Computer Networks, LCN, IEEE, pp. 414-421, 2022 IEEE 47th Conference on Local Computer Networks (LCN), Hybrid hosted in Edmonton, Canada, 26/09/22. https://doi.org/10.1109/LCN53696.2022.9843323

Distributed Attestation Revocation in Self-Sovereign Identity. / Chotkan, Rowdy ; Decouchant, Jérémie ; Pouwelse, Johan.
Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022. ed. / Sharief Oteafy; Eyuphan Bulut; Florian Tschorsch. IEEE, 2022. p. 414-421 9843323 (Proceedings - Conference on Local Computer Networks, LCN).

Research output: Chapter in Book/Conference proceedings/Edited volume › Conference contribution › Scientific › peer-review

TY - GEN

T1 - Distributed Attestation Revocation in Self-Sovereign Identity

AU - Chotkan, Rowdy

AU - Decouchant, Jérémie

AU - Pouwelse, Johan

N1 - Conference code: 47th

PY - 2022

Y1 - 2022

N2 - Self-Sovereign Identity (SSI) aspires to create a standardised identity layer for the Internet by placing citizens at the centre of their data, thereby weakening the grip of big tech on current digital identities. However, as millions of both physical and digital identities are lost annually, it is also necessary for SSIs to possibly be revoked to prevent misuse. Previous attempts at designing a revocation mechanism typically violate the principles of SSI by relying on central trusted components. This lack of a distributed revocation mechanism hampers the development of SSI. In this paper, we address this limitation and present the first fully distributed SSI revocation mechanism that does not rely on specialised trusted nodes. Our novel gossip-based propagation algorithm disseminates revocations throughout the network and provides nodes with a proof of revocation that enables offline verification of revocations. We demonstrate through simulations that our protocol adequately scales to national levels.

AB - Self-Sovereign Identity (SSI) aspires to create a standardised identity layer for the Internet by placing citizens at the centre of their data, thereby weakening the grip of big tech on current digital identities. However, as millions of both physical and digital identities are lost annually, it is also necessary for SSIs to possibly be revoked to prevent misuse. Previous attempts at designing a revocation mechanism typically violate the principles of SSI by relying on central trusted components. This lack of a distributed revocation mechanism hampers the development of SSI. In this paper, we address this limitation and present the first fully distributed SSI revocation mechanism that does not rely on specialised trusted nodes. Our novel gossip-based propagation algorithm disseminates revocations throughout the network and provides nodes with a proof of revocation that enables offline verification of revocations. We demonstrate through simulations that our protocol adequately scales to national levels.

KW - Self-Sovereign Identity

KW - revocation

KW - offline verification

UR - http://www.scopus.com/inward/record.url?scp=85143052409&partnerID=8YFLogxK

U2 - 10.1109/LCN53696.2022.9843323

DO - 10.1109/LCN53696.2022.9843323

M3 - Conference contribution

SN - 978-1-6654-8002-4

T3 - Proceedings - Conference on Local Computer Networks, LCN

SP - 414

EP - 421

BT - Proceedings of the 47th IEEE Conference on Local Computer Networks, LCN 2022

A2 - Oteafy, Sharief

A2 - Bulut, Eyuphan

A2 - Tschorsch, Florian

PB - IEEE

T2 - 2022 IEEE 47th Conference on Local Computer Networks (LCN)

Y2 - 26 September 2022 through 29 September 2022

ER -

Distributed Attestation Revocation in Self-Sovereign Identity

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this