论文标题
一个真正的自我主张身份系统
A Truly Self-Sovereign Identity System
论文作者
论文摘要
现有的数字身份管理系统无法提供自己的身份数据的用户所需的控制属性，公开身份数据的可信度以及网络级别的匿名性。最近提出的自我主权身份（SSI）方法有望为用户提供这些属性。但是，我们认为，如果不在网络层面上解决隐私，SSI系统就无法实现这一承诺。在本文中，我们介绍了与荷兰政府合作创建的解决方案TCID的设计和分析。 TCID是一个由一组组件组成的系统，共同满足七个功能要求，以保证所需的系统属性。我们表明，TCID中网络级匿名产生的延迟明显大于身份数据披露协议的延迟，但对于实际情况仍然足够低。我们得出的结论是，当前对SSI的研究过于狭窄地专注于这些数据披露协议。
Existing digital identity management systems fail to deliver the desirable properties of control by the users of their own identity data, credibility of disclosed identity data, and network-level anonymity. The recently proposed Self-Sovereign Identity (SSI) approach promises to give users these properties. However, we argue that without addressing privacy at the network level, SSI systems cannot deliver on this promise. In this paper we present the design and analysis of our solution TCID, created in collaboration with the Dutch government. TCID is a system consisting of a set of components that together satisfy seven functional requirements to guarantee the desirable system properties. We show that the latency incurred by network-level anonymization in TCID is significantly larger than that of identity data disclosure protocols but is still low enough for practical situations. We conclude that current research on SSI is too narrowly focused on these data disclosure protocols.
